I'm an experienced programmer and I've never found anything harder to work with than OAuth 2.0. Every project I work on, there's a two week "WTF" while we figure out all the details.