Is it really necessary to couple to requests in order to have a decent OAuth implementation? Why not a layered API, with lower levels supporting a higher-level

Is it really necessary to couple to requests in order to have a decent OAuth implementation? Why not a layered API, with lower levels supporting a higher-level wrapper library using requests?