There are few contexts in which you can accomplish OAuth without that redirection. One such context is [node:136] but it requires approval and is for only a small class of native applications. If you’re operating a website, you really have no choice but to use redirect-based OAuth.