oauth: get client via json api