Links

An article that progressively explains why OAuth 2 works the way it does today. At each stage, we add a constraint, and explain how the protocol responds to this constraint, to arrive at the final protocol (in broad terms, of course).

Very true, I also have a strong tendency to apologize and blame myself, as if I should have known better, done better, even if I had already done my best during the initial implementation.