Why is OAuth still hard in 2023?
It'd be interesting to hear about people who have had a good time implementing OAuth, as my experience is similar to that in the article. I've played with adding it to a few side projects and the process usually goes:<p>1. Read loads of docs, end up pretty confused<p>2. Find a library that seems to do what I want<p>3. Install this huge library full of opaque code 
doing...things<p>4. Have an impossible time troubleshooting issues<p>5. Get scared ("I'm almost certainly doing something wrong here") and give up<p>I find it hard to have much faith in security standards like this. I want them small, well defined and understandable and OAuth does not meet any of these criteria in my experience.