Archived tweet #1959 from the @leastfixedpoint Twitter Archive

In a world where object capabilities (a) map so nicely to URLs and (b) have been known about for >30y, why does OAuth exist?