Question: extracting the OAuth2 feature into a generic WP OAuth plugin

This plugin has proved that regular WP instances can easily handle the OAuth2 authentication layer and provide modern authorization flow for third-party apps interested in talking to WP.

I'm wondering if there have been discussions of extracting the OAuth2 parts into a standalone plugin similar to how Application Passwords were extracted from the two-factor plugin and eventually merged into WP core.

OAuth2 is now required for proper [MCP flows](https://modelcontextprotocol.io/specification/draft/basic/authorization) and the [mcp-adapter](https://github.com/wordpress/mcp-adapter) plugin (eventually the official [AI plugin](https://github.com/WordPress/ai)) could really benefit from having this functionality.

I'm seeing parallel activity happening across multiple vendors building the OAuth2 components in different ways for their implementations and having an official WP core solution would really help with centralizing and securing those efforts.

Review the plugin's existing OAuth2 implementation and the linked MCP authorization specification, then compare the proposed standalone-plugin approach with the Application Passwords precedent mentioned in the issue. Done would require an agreed extraction scope and direction for a generic WordPress OAuth2 solution, rather than a single localized code change.

Written by the indexing model from the issue text.