OAuth sandbox
Simulate a third-party login flow with ECDH-encrypted token return and local callback verification.
Popup window using postMessage handoff.
Preparing server public key in the background...