Quite surprising, but the few hundred hours I put into thoroughly understanding the OAuth spec 10+ years ago (1.0, 1.0a, 2.LOL) was totally worth it. Yes, I’m debugging an OAuth flow for the 3rd or 4th time this year and it is saving the project days if not weeks.