Currently, if a user wants to access an OAuth2 application, or any other URL that uses token-based authentication, they have to use this syntax:

wget --header "Authorization: Bearer <token>" <URL>

This is kind of clumsy.  It would be nicer if wget provided an option to provide just the token value, and it would take care of putting it in the HTTP header in the correct way.  For example:

wget --bearer-token <token> <URL>

There is already precedent for doing this: HTTP basic auth.  Instead of having users type

wget --header "Authorization: Basic <base64-encoded-username-password>"

Instead, wget allows the --user and --password options (or, the username & password in the URL?), and will create the appropriate HTTP header from that information.

I'll also note that curl has implemented a similar option (if wget wants to use the same option name for cross-compatibility):

From https://curl.se/docs/manpage.html#--oauth2-bearer

  --oauth2-bearer <token>

  (IMAP LDAP POP3 SMTP HTTP) Specify the Bearer Token for OAUTH 2.0 server authentication. The Bearer Token is used in conjunction with the user name which can be specified as part of the --url or -u, --user options.

  The Bearer Token and user name are formatted according to RFC 6750.

  If --oauth2-bearer is provided several times, the last set value is used.

  Example:

   curl --oauth2-bearer "mF_9.B5f-4.1JqM" https://example.com