Build an OAuth 2.0 Server

Implement an OAuth 2.0 authorization server: authorization code flow, PKCE for public clients, access + refresh tokens with rotation, scopes, redirect URI validation, state-based CSRF defense, and token introspection. The auth protocol behind 'Login with Google/GitHub/Facebook' and every B2B SaaS.