Hey @MZL ,
Checkout my post here and let me know if this helps explain the Web SDK + OAuth limitations:
Thanks, Tommy