Why is OAuth still hard in 2023?
It'd be interesting to hear about people who have had a good time implementing OAuth, as my experience is similar to that in the article. I've played with adding it to a few side projects and the process usually goes:1. Read loads of docs, end up pretty confused2. Find a library that seems to do what I want3. Install this huge library full of opaque code 
doing...things4. Have an impossible time troubleshooting issues5. Get scared ("I'm almost certainly doing something wrong here") and give upI find it hard to have much faith in security standards like this. I want them small, well defined and understandable and OAuth does not meet any of these criteria in my experience.