We don't need a new version of OAuth 2. The current version provides sufficient options for developers to implement most types of applications.
Many services such as Facebook, Github, and Google have already deployed OAuth 2 servers, and deployed implementations win.
The OAuth 2 spec itself leaves many decisions up to the implementor. Instead of describing all possible decisions that need to be made to successfully implement OAuth 2, this post makes decisions that are appropriate for most ...