I am not familiar with OAuth, but if it runs under Linux/Apache we can certainly give it some server space. I only do not really understand why an API plugin needs its own server. When Spotware uses OAuth for their API, then either they or their supported brokers must anyway provide an OAuth server for their clients, or not?