All the articles with the tag "oauth".
id_token audience validation failures and missing redirect URIs. Both are traps that rarely show up in the official docs, so I'm recording how I ran into them and solved them myself.