One thing I wish I had learnt early on when I started looking into authentication is that OIDC (ideally with SSO through Google or GitHub) is the protocol/real-world implementation most developers will want to just be able to get started with whereas OAuth2 is more like the (boring) specification.

If you're wondering what to use to get authentication working (and not doing something risky), 90% of the time the answer will be OIDC.