In OAuth2, don't use function `api()` for get public key. It will fail when user login at the first time.