diff --git a/grouprise/common_settings.py b/grouprise/common_settings.py
index 7818c97571566f9e3a702832d8c1ba2b9264f473..b0bad4d0ac3a5376aecef2e0fd05c048c7339ff4 100644
--- a/grouprise/common_settings.py
+++ b/grouprise/common_settings.py
@@ -39,11 +39,13 @@ INSTALLED_APPS = [
     'allauth.socialaccount',
     # deactivated, see #662
     # 'cachalot',
+    'corsheaders',
     'django_filters',
     'django_mailbox',
     'huey.contrib.djhuey',
     'haystack',
     'imagekit',
+    'oauth2_provider',
     'rest_framework',
     'rules',
     'taggit',
@@ -63,6 +65,7 @@ INSTALLED_APPS = [
 ]
 
 MIDDLEWARE = [
+    'corsheaders.middleware.CorsMiddleware',
     'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.common.CommonMiddleware',
diff --git a/grouprise/features/stadt/urls.py b/grouprise/features/stadt/urls.py
index 9a5e81be3272132c21c798c329cf951f262bfd17..82fda31c3fd4fdd83c302064910d5323546a2894 100644
--- a/grouprise/features/stadt/urls.py
+++ b/grouprise/features/stadt/urls.py
@@ -1,4 +1,4 @@
-from django.urls import path, re_path
+from django.urls import include, path, re_path
 from django.conf.urls import url
 
 from grouprise.features.content.views import Detail as AssociationDetailView
@@ -39,4 +39,6 @@ urlpatterns = [
         r'^(?P<entity_slug>[\w-]+)/(?P<association_slug>[\w-]+)/$',
         AssociationDetailView.as_view(),
         name='content'),
+
+    path('stadt/oauth/', include('oauth2_provider.urls', namespace='oauth2_provider')),
 ]
diff --git a/requirements.txt b/requirements.txt
index 8169b5da6da3e1174dd0f9e574a05dea42b0efe6..ccc29af473623f44c033628e2cac6230a1e060f9 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,12 +4,14 @@ django<2.3                  # debian: python3-django
 django-allauth              # debian (buster): python3-django-allauth
 # deactivated, see #662
 # django-cachalot             # NOT IN DEBIAN
+django-cors-middleware      # debian: python3-django-cors-headers
 django-csp                  # debian (buster): python3-django-csp
 django-filter               # debian: python3-django-filters
 django-haystack             # debian: python3-django-haystack
 django-ical                 # NOT IN DEBIAN
 django-imagekit             # debian (buster): python3-django-imagekit
 django-mailbox              # NOT IN DEBIAN
+django-oauth-toolkit        # python3-django-oauth-toolkit
 django-taggit
 djangorestframework         # debian: python-djangorestframework
 feedparser                  # debian: python3-feedparser