A proper SSO, oauth2 and/or OIDC endpoint & Public VRChat API?

You can ask in the OAuth request for what “data” you want access to, VRChat can just restrict it so you can only request basic info, eg. Name, Id, some basic profile info