I am not yet familiar with OAuth2, but when time permits I am going to attempt writing a proper extension based on top of https://gerrit.wikimedia.org/r/#/c/195297/ and whatever Ingo has learned so far. I believe there will other users of OAuth2 who could help maintaining the extension in the future.