#oauth2

Auth, all four ways — and the OAuth2 refresh race that breaks most apps

Bearer, cookie, API key, OAuth2 — and the one bug almost every hand-rolled auth layer has: four parallel requests triggering four token refreshes at once.