In our case, for example, you can log into our service using your github identity, but we are not ourselves (yet?) an oauth provider. So we would exchange your oauth access token for a cookie, similar to basicauth.