Yeah, pretty much. The big difference is that you don’t need a centralized authorization server and the messages are relayed via npubs instead of a bunch of rest api calls and endpoints. I am now adding in scope to round out what OAuth does.