A web authorization protocol based on industry best practices, putting mobile and native apps first. A redo of the original ideas behind OAuth, providing true interoperability and security.