Everything you need to know about OAuth: https://gravitational.com/blog/everything-you-need-to-know-about-oauth/
