Please report suspected vulnerabilities privately through GitHub's Report a vulnerability option instead of opening a public issue.

Include the affected component, reproduction steps, potential impact, and any suggested remediation. This project is a reference implementation; the demo authentication flow must be replaced before production use.