Comment by crooked-v

Arbitrary OAuth built into the spec across the board is extremely useful. It prevents the many, many friction points that come from needing an agent to separately understand the authentication for many different services, or to even know that authentication is happening at all (it happens entirely at the harness level).