no, no blockhain. Just OAuth2.0 decentralized with DNS, as the authorization server and the resource server can be behind 2 different domains.