I have just shipped a production service centered around OAuth and interfacing with OpenID Connect servers.