OAuth/OIDC Implementation Mistakes!

How We Overcame Overlooked Details and Breaking Changes in the Specifications