The OAuth model feels too cumbersome to be integrated into an API testing platform？