Uh what? Google uses oAuth all over the place and in fact that is the correct solution to this problem. (I assume NIH is never-in-hell or something, can't say I've seen that before)

For example, https://developers.google.com/google-apps/gmail/oauth_overvi...