AUTHENTICATION-PROTOCOL · 0-AUTH-Δ照合手順
METHODOAuth 2.0 · authorization_code
PROVIDERSGoogle · GitHub
SCOPEread:user · user:email (provider 依存)
SESSIONJWT · 30日
DATA-STOREDprovider_user_id · email · display_name
POST-AUTH/ へ復帰
> auth.request(provider=<選択した経路>)
redirect: <provider>/oauth/authorize
callback: /api/auth/callback/<provider>
on_success: POST /service/oauth-callback → citizen upsert
on_session: sign panopi JWT → cookie set