OAuth from First Principles

An article that progressively explains why OAuth 2 works the way it does today. At each stage, we add a constraint, and explain how the protocol responds to this constraint, to arrive at the final protocol (in broad terms, of course).