Redence capability: OAuth (Authentication)
Repo: Nerva. Stack: JWT, OAuth2.
Substantive change: implement a real OAuth2 authorization-code flow handler — an /auth/callback route that exchanges the code for a token, validates state (CSRF), and issues the app's own JWT/session. Use the existing auth skill/middleware patterns. Add tests for the happy path and a state-mismatch rejection. The diff must add real OAuth handling, not docs.
Done when: callback handler + tests merged to main, checks green. Include the current Redence proof token (OAuth verify page) in the commit message.
Redence capability: OAuth (Authentication)
Repo: Nerva. Stack: JWT, OAuth2.
Substantive change: implement a real OAuth2 authorization-code flow handler — an
/auth/callbackroute that exchanges the code for a token, validates state (CSRF), and issues the app's own JWT/session. Use the existing auth skill/middleware patterns. Add tests for the happy path and a state-mismatch rejection. The diff must add real OAuth handling, not docs.Done when: callback handler + tests merged to main, checks green. Include the current Redence proof token (OAuth verify page) in the commit message.