forked from mirror/crumbs-original
Dynamic [provider] routes for Google, GitHub, and OIDC. Stores state and PKCE verifier in httpOnly cookies. Callback validates code, finds/links user by provider ID or email (invite-only), and creates session. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>