Academic study of OAuth2