from the client side, yes. but from their side, ASPs are a codebase they apparently would like to free themselves from. it's understandable, given that most cli

from the client side, yes. but from their side, ASPs are a codebase they apparently would like to free themselves from. it's understandable, given that most client apps by far (by %use) support oauth. oauth2 is definitely more annoying for a client to implement, much more annoying. but it's much easier for a user than ASPs.