Should developers know Identity protocols like OIDC and OAuth, or should they only rely on high-level abstractions like SDKs?...