switch oauth operations spec to yaml