I feel like like that recently. Just examining an app that was largely written in isolation and ... I just discovered a new auth endpoint / service that nobody knew we had, and it does not behave logically. It has all sorts of limits that impedes testing / troubleshooting.

Pain ...

For the record I am going to eventually direct this app to the "normal" auth service and fix it all up, but man why is it this way???