Wow, okay. I hadn't dug into OAuth enough to get to that point. Is there any reason the client token isn't authentication enough for the server to decide to sig

Wow, okay. I hadn't dug into OAuth enough to get to that point. Is there any reason the client token isn't authentication enough for the server to decide to sign the request? If the app (client+server) has control of the authentication flow, it shouldn't need another set of credentials to figure that out.