A take on the OAuth 2 authentication server specification.