IdP, OAuth 2.1, OIDC & PKCE

How Identity Providers, OAuth 2.1, OpenID Connect, and PKCE fit together: roles, tokens, flows, and security trade-offs.