Question
For the v1.6.24 account-linking, provider-account identity, profile-field ownership, account-cookie binding, callback error, OAuth proxy, redirect refusal, remote audience, JWKS, hosted-domain, Apple, Facebook, PayPal, Microsoft, Reddit, WeChat, One Tap, Generic OAuth, and Yandex deltas, what exact RustAuth contract should ship? Preserve stricter fail-closed behavior where justified and specify every provider-level option, error, and regression needed for the parity claim.
Question
For the v1.6.24 account-linking, provider-account identity, profile-field ownership, account-cookie binding, callback error, OAuth proxy, redirect refusal, remote audience, JWKS, hosted-domain, Apple, Facebook, PayPal, Microsoft, Reddit, WeChat, One Tap, Generic OAuth, and Yandex deltas, what exact RustAuth contract should ship? Preserve stricter fail-closed behavior where justified and specify every provider-level option, error, and regression needed for the parity claim.