There are OAuth implementations available in just about every language. I think the challenge isn't programming skills, but understanding something inherently

There are OAuth implementations available in just about every language. I think the challenge isn't programming skills, but understanding something inherently complex: how do you safely give third parties privileges to act on your behalf?