From Dev.to
Implementing OpenID Connect (OIDC) from Scratch in Go
Most teams drop in coreos/go-oidc and call it done. That works until you hit a non-standard provider, a subtle validation bypass, or a token leakage bug you can't explain because you never read the sp...