mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-08 12:32:43 +00:00
Connect mints the PKCE pair, stashes the verifier on the OAuth-state row, and sends the S256 challenge to the authorize endpoint. Callback reads the verifier back and presents it on the token exchange, refusing cleanly when it is absent. The connection-test probe hits the classic /1/user/-/profile.json endpoint.