OAuth and OpenID Connect: Do PKCE and Nonce Provide the Same Protection? | Hacker News Reader