> A web authorization protocol based on industry best practices, putting mobile and native apps first. funny. OAuth was initially invented in order to fix the

> A web authorization protocol based on industry best practices, putting mobile and native apps first. funny. OAuth was initially invented in order to fix the problems of web applications having to store end-user credentials, so putting the web first. For native apps, we've long have the problem solved by just doing BASIC auth. OAuth was in-fact always problematic for native applications (embed web views, very easily mitm-able) and it always left a sour feeling in my mouth that it's more about controlling your API clients ecosystem than it is about increasing the security for the end-users (see twitter)