"OAuth2 is really easy to implement, but it kinda feels like a step backwards security-wise." No, no it isn't. There are about three proper ways to implement i

"OAuth2 is really easy to implement, but it kinda feels like a step backwards security-wise." No, no it isn't. There are about three proper ways to implement it. Almost nobody whose site I've come across that uses OAuth2 has it properly implemented. Token revocation and authentication is hard, folks.