Plopping a complete authentication/login re-implementation into production today for a headless umbraco site with a ... difficult ... external login provider. Wish me luck.

What's the difficult provider out of interest 😅

Sorry don't remember where you're from so if you are Danish you already know all of this 😄 It's the Danish MitID (which honestly is fine), but wrapped by KMD (major Danish tech provider/company) and their wrapper is ... not great.

Interesting.. not Danish so not familiar with these 🙂

MitID is the national ID in Denmark we use for pretty much anything. It's pretty common to interact with it through a provider like Nets, Signicat, Signaturgruppen, Criipto or - god forbid - KMD 😄