We recommend using HTTP header-based OAuth rather than parameter-based OAuth – using parameters is much more error prone and doesn’t sufficiently separate concerns.
Have you taken a look at the OAuth documentation on this site? [node:2927] has some tips on this part.