/*
Package auth provides an authentication service for managing user accounts and an OAuth2 provider.

The service is an opinionated implementation of authentication using passphrases and the
code.secondbit.org/pass package to implement user credentials and accounts. Additionally, users
are permitted to login using any email address they have on record. Care is also taken to be able
to mitigate attacks that have already happened and plan ahead for the worst case scenarios.

An OAuth2 provider is also built-in and provided, complete with client registration and management,
as well as a specification-based set of handlers for managing the issuing of grants and tokens. Token
validiity may be asserted through an API, or a proxy service is provided for stripping auth-specific
information from requests and replacing it with a trusted header containing information about the user
and client that authorized the request.
*/
package auth