OAuth2 and OpenID Connect

The standard behind 'Log in with Google': OAuth2 grants delegated access, OIDC adds identity on top, and the authorization-code-with-PKCE flow ties it together.

1. The Problem and the Four Roles
2. The Authorization Code Flow and the Three Tokens
3. Production Reality and the Gotchas