OAuth is frequently marketed as "more secure". But implementations often confuse authentication with authorization, resulting in problems like this.
I just say auth. You decide which one I mean.
I just say auth. You decide which one I mean.