callback

type Handler struct {
	Login  authn.LoginService
	Logger logx.Logger
	// LoginURL is optional. When it is set, a browser request to the callback
	// endpoint without a code is redirected to the provider login URL instead of
	// returning a raw JSON error. This makes local integration tests and real web
	// app flows friendlier while keeping the provider hidden behind authn.LoginService.
	LoginURL      string
	RedirectURI   string
	ExpectedState string
	OrgID         string
	AppID         string
	SuccessText   string
	OnSuccess     func(context.Context, authn.CallbackResult) error
}