6c17e87cf6
- support providers requiring client_secret_basic while preserving POST fallback - stop logging user-info claims and mapped profile data - cover both client authentication styles with PKCE