Wrong use of absolute url in destination, function _oauth_common_authorize()

As mentioned on drupal_goto(): // Do not redirect to an absolute URL originating from user input.

This means when you pass on an absolute url, it's not used. _oauth_common_authorize() has to be changed:

    $query = $_GET;
    unset($query['q']); // why are there so few q's?
    drupal_goto('user/login', array(
      'destination' => url('oauth/authorize', array(
        'query' => $query,
        'absolute' => TRUE,
      )),
    ));

Find patch attached for the fix.