This is pretty great @HelNershingThapa -
Because OAuth2 is much simpler - relying on bearer tokens and SSL for security - it means that almost nothing remains in this library after the proposed change.

So I think what I'm going to do is:

• just keep this ohauth library as a "most-of-the-way OAuth 1.0 client implementation in Javascript".
  It will become less relevant over time and that's ok.
• but move the few remaining things (xhr, header generation) back over to the https://github.com/osmlab/osm-auth library, which will be focused on OAuth2 going forward.

That sounds great. I'll be looking forward to the new release of the osm-auth library. Thanks for the review @bhousel

Thank you @bhousel and @HelNershingThapa for the collaboration. This looks exciting. Really looking forward to the new release of the osm-auth too :)