I'm writing a broker plugin for an API that authenticates users with OAuth 2.0. Part of this spec is that the application should have a client ID and client secret and the secret in particular should never be disclosed to the user. The secret is needed for initial authentication and for token refreshing.

This means that for Zorro to support this broker, a web service to authenticate users and refresh their tokens would need to be built (by me) and hosted by Zorro.

Is this something that the Zorro team would accept? The current broker plugins don't appear to require any such service so I thought it worth asking.