OAuth 2.0 has been the de facto standard for authorization for over a decade, with a sprawl of optional flows, extensions, and patterns. OAuth 2.1 cleans it up into one canonical playbook -- with PKCE for all clients, no implicit flow, and tightened token handling. Here's what changed and how to actually implement it correctly.
Engineering Craft
TypeScript, CI/CD, databases, observability -- the skills that make code production-ready.
