Use when implementing or reviewing OAuth 2.x / OpenID Connect authorization, login, API access, PKCE, scopes, redirect URIs, access/refresh tokens, JWT validation, audience/issuer checks or multi-provider identity integrations.
