Doesn't most Oauth2 things work that way? http://www.riskcompletefailure.com/2013/03/postmessage-oauth-20.html?m=1 http://www.riskcompletefailure.com/2013/03/p

Doesn't most Oauth2 things work that way? http://www.riskcompletefailure.com/2013/03/postmessage-oauth-20.html?m=1 http://www.riskcompletefailure.com/2013/03/postmessage-oauth...