OAuth2 & OpenID Connect

Implement secure auth flows: authorization code, PKCE, client credentials, token refresh, and JWK validation.