In #FedBOX land, I have finally made progress in excising the OAuth2 routing to its own individual service.
Deploying has increased complexity, but it paves the path for replacing our spit and duct-tape user management to something more robust, like #ory#kratos.
Leftovers in FedBOX are the OAuth2 client CRUD operations, soon to be replaced with automated client creation.