Does Clojure's "buddy" not work for OAuth2 or something? Last I recall it worked well enough but not sure what your specific requirements are.

https://cljdoc.org/d/buddy/buddy-auth/3.0.1/doc/user-guide