https://serrapa.github.io/posts/BB-oauth2/
OAuth2 - What was wrong? - Paolo Serra