Hello Craig,
Thanks for your quick response.
Yes, I am following OAuth 2.0. I prefer extensions as I can apply more logics and security levels in C# code than using the components. I was just concern if extension affect the performance of the application or not.
It will not affect the performance, though it can affect the maintainability of your application as it will require C# developers to make changes.