Best Practices for OAuth, OpenID Connect, and CORS | Hacker News Reader