Well, personally I prefer using something like https://github.com/TykTechnologies/tyk which basically API Gateway, and in addition to auth (not only oAuth), also adds stuff like policies across multiple API's and rate-limiting and quotas.