Implement basic application authenthication.
An application must be created by an user by given application profile, redirect url etc... then give them an ID and a secret.
This is the frist-step, then find a proper way to give application privilege to access user profile.