Many projects start off with a basic requirement of having email + password based authenticated users, sign-in and sign-up flows, registration, forgot password, etc. Soon, you need to support browser as well as mobile app flows (using OAuth2). As the product matures, you realize you