fix: tolerate /userinfo responses without an email claim#68

Open

zfields wants to merge 13 commits into

mainfrom

fix/userinfo-email-fallback

Commits on Jun 5, 2026

fix: tolerate /userinfo responses without an email claim

zfields
and
claude
committed
fix: check /userinfo status and require sub when email is absent

zfields
and
claude
committed
fix: keep /userinfo response body out of browser-facing error page

zfields
and
claude
committed
fix: quote /userinfo body in diagnostic to neutralize terminal escapes

zfields
and
claude
committed
fix: harden errHandler against HTML rendering and surface /oauth2/token status

zfields
and
claude
committed
refactor: centralize safe error handling in browser-based login

zfields
and
claude
committed
fix: treat any non-200 /oauth2/token response as a hard failure

zfields
and
claude
committed
docs+diag: clarify fail summary comment and include parse errors

zfields
and
claude
committed
fix: shut down on error paths and redact tokens from diagnostics

zfields
and
claude
committed
fix: process exactly one OAuth callback and ignore stray requests

zfields
and
claude
committed
fix: don't leak credentials or silently truncate oversized responses

zfields
and
claude
committed
fix: report OAuth error redirects instead of hanging

zfields
and
claude
committed
fix: don't let a state-mismatched request cancel an in-progress login

zfields
and
claude
committed