OAuth2-based authorization implemented in the UI