I've seen a few posts of people asking for OAuth2 access to the API. I'd like to 2nd, 3rd or even 4th the request, but I can't come up with a seamless implementation. Bungie uses OAuth against PSN and XBL, but doesn't provide its own form of authentication. Is the following flow possible or is it just bananas: 1. Open example.com/sign-in 2. example.com redirects to bungie.net/oauth/authorize?params=here 3. bungie.net presents provider auth links PSN/XBL 4. User signs in 5. PSN/XBL redirects back to bungie.net for handshake 6. bungie.net redirects back to example.com This flow would require some new session management logic, but it seems like it can leverage all of the existing provider specific logic. I could be missing something, but I'd love to hear any feedback on the idea.