I'm not sure what you're suggesting when you suggest not relying on browser impl...

capsule_toy on Feb 20, 2013 | parent | context | favorite | on: How we hacked Facebook with OAuth2 and Chrome bugs

I'm not sure what you're suggesting when you suggest not relying on browser implementation. This sounds impossible as the browser is the client and the client will have access to user credentials.