A reference implementation of OAuth2 and OpenID Connect in Go, structured as independently-deployable microservices — each with its own database, its own contract, and clean ports-and-adapters boundaries inside. A study in getting authentication and authorization right by construction.