Tested it today, had BadAuthentication pop up, followed the alternative flow from https://github.com/simon-weber/gpsoauth#alternative-flow, worked as a charm, apart from the fact that we need to refresh the oauth_token every new request.
I will submit a PR in case with the small change.