Sorry but the autoformatting miscommunicated my statement... by @adonis I meant adonis @ kbin.social.

And the domain is always part of the actual userhandle.

Regarding OAuth/JWT, these aren't new concepts. They've been around for while, if not decades.