I've been looking at OAuth a bit lately.

I'm amazed there is no open-source, drop-in HTTP proxy to authorise access to REST APIs. The closest I've found is PingFederate, which is kind of expensive, and DoorMan[1], which seems incomplete and unmaintained.

Am I the only person who'd find this useful? What are other people doing - building it into their APIs?

[1] https://github.com/movableink/doorman