An implementation of OAuth with client-side password authentication. Neither the password nor a hash of the password will ever be stored or communicated to the server.