bastodon/app/controllers/oauth
..
authorizations_controller.rb
authorized_applications_controller.rb
tokens_controller.rb