I built a production-style OAuth 2.0 & OpenID Connect auth system (React + Express + TS + Prisma) — POC, code & write-up included