> Another hint that this is not written by people familiar with OAuth is that they have implemented Basic auth support incorrectly.

so tldr most of the issue the author has is against the person who made the library is the design not the implementation?