Messing around with OpenID connect for a web service template has proven to be a mistake for me in this regard.

A template has no immediate utility, and OAuth2 and OpenID are nightmare protocols where dreams go to die.