authentication_go

Package active_session_processor checks, against the database, that a session token an authorizer has accepted may still be acted on.

Package authentication_method names how a session's holder proved who they are, as the "amr" claim carries it.

Package navigation_refresh_handler renews an expired session on a navigation to a sign-in page and sends the browser back where it came from, instead of asking someone to sign in again while their authentication is still valid.

Package session_instructions holds the session instructions a server returns to a browser for a device bound session.

Package login_endpoint starts the authorization code flow: it mints the state and the PKCE code verifier, records them as an oauth flow, and redirects the user to the provider.