//! Tenant OAuth provider configuration port.
//!
//! This port loads only core-owned OAuth domain decisions: provider enablement
//! and registration allowance. It is deliberately separate from
//! `TenantPolicyPort` and deliberately secrets-free.
use crate::;
/// Tenant OAuth provider configuration loading port.
///
/// This port is intentionally separate from `TenantPolicyPort`.
/// Email/password auth policy and OAuth provider enablement are different
/// configuration surfaces.
///
/// Implementations live outside `nythos-core` and must not leak provider
/// secrets, client IDs, redirect URIs, endpoints, JWKS URLs, or HTTP concerns
/// through this contract.