rolled my own auth. not too happy with the api surface yet (still need to Make A Thing in it to confirm if it's Actually Usable) but the implementation likely wont change all that much so you can yell at me for the things i got wrong
git.gay/kopper/kibb...