A quick write-up on how the OAuth-like flow I demoed yesterday works:

https://github.com/kind-0/nsecbunkerd/blob/master/OAUTH-LIKE-FLOW.md

This doc is likely not complete, but wanted to give a quick general overview of how it works.