Expand description
“Sign in with GitHub”: the OAuth web flow. A random state value in a short-lived cookie
ties the callback to the browser that started it. The account email is the user’s primary
verified GitHub email, so a GitHub login and a magic link for that address are one account.