pub type OnDone = Arc<dyn Fn(LoggedIn) -> Result<(), String> + Send + Sync>;
Where a done login’s session goes (the embedder keeps it for the org); an error fails the login.
pub struct OnDone { /* private fields */ }