The token, registration, revocation, device authorization and pushed authorization request endpoints, and with openid: the JWKS and userinfo endpoints, as one Plug router for hosts without Phoenix:

forward "/oauth", to: Sake.Auth.RouterPlug

Mount Sake.Auth.Authorize yourself, behind your session and login plugs, at /oauth/authorize, and with device: Sake.Auth.DeviceVerification the same way, at /oauth/device.