Proof of concept for all API handling oauth2 requests