It's not other than OAuth2 is the de facto standard for doing this sort of thing, for better or for worse. You could use a different protocol but developers ar

It's not other than OAuth2 is the de facto standard for doing this sort of thing, for better or for worse. You could use a different protocol but developers are less likely to integrate with it.