Post #1265921

I already have a working, spec compliant OIDC capability that should plug right into their set up. I am proud of this capability, it works with auto-configuring clients too using a well known configuration endpoint. I've built it twice so am very familiar and very confident. First time was temporary, to meet an aggressive deadline earlier this year. Second was porting it into its permanent home, a service I wrote in Rust solely for owning our OAuth2 capabilities.