Wanna know about hacks? I'll tell you. There is a peace of software called SugarCRM. It has OAuth2 provider implementation. I was assigned to write OAuth2 consumer for it.
It turned out they just failed to make it right.
The list of hacks:
* Hack on standard Authentication header. They use custom.
* Hack on "scope". They send null which is standard violation. So it is replaced to empty string before response processing starts.
* This is my favorite. Refresh token simply doesn't work. So we need to store user's credentials in memory to be able to reauthenticate user transparently.

I hate SugarCRM!
Honestly. I just cannot understand how they manage to sell this peace of php crap.

You never know what is pain until you try to install SugarCRM...

That moment when you work butt off whole month for some requirement and when you finish that, the Email comes saying stop doing that because they want to change their whole platform.(SugarCRM to Salesforce).
Now I have to learn that (Hope it goes well).
I'm happy because "bye bye php!" and little sad because now I've to spend half of my time learning Salesforce.

For those who ever tried to find and/or implement a crm: everything seems to be based on that bastardized vtiger core which is based on an old version of sugarcrm I'm so fucking tired of that shit. I gonna make my own. The underlying framework makes me sick to the bone. Everything in there relies heavily on magic. Being arround for years and just recently got a new major release yet unable to transfer offer items to the invoice even though it requires a relation?

This is not blunt talk. My thing is based on Laravel, EAV principle for dynamic fields, module code structure, interface for the list view and many other stuff is already integrated. This is gonna be done and will be done because existing stuff is so fucking ugly and broken I can't fathom myself.

Btw I still need a name

PS: I hate smarty, PearDb and their fucking database layout