I just had the same experience digging into Oauth2 and user authentication. Everything “guide” in google search is trying to sell you something, so it just “get

I just had the same experience digging into Oauth2 and user authentication. Everything “guide” in google search is trying to sell you something, so it just “gets you up and running” with their proprietary software. (Auth0, Google, etc) The Orielly-esque books on the topic are terrible, with terrible explanations paired with terrible code. I’m dying for like a full 100% deep dive on secure, modern web authentication and authorized, with matching code examples, just because I’m so curious about the subject. The best I’ve done so far is to read some open source Oauth code like fosite- but this still doesn’t cover user authentication, or key signing best practices, or secret management or (all the other things I don’t know about but could contribute to an insecure implementation). I feel like I’m at best getting 10% of the picture.