Oauth and oau22.

* Oauth has only one authorization process. In addition to Web applications, it is not user-friendly to desktop and mobile applications.
The signature is too complex. Not friendly to developers.

Oauth1 defines four types of roles: resource owner, resource server, client, and authorization server. It provides four types of processes that can be used according to different application scenarios.
Remove the signature and use SSL to ensure security. Therefore, the corresponding secret does not exist for the token. This also directly causes oau2's incompatibility with oauth1.