After a solid stretch of JWT infrastructure work, the app now authenticates real users. Google and Apple sign-in are both wired up and working end-to-end — from the onboarding screen all the way to a personalized session.
Auth providers are configurable from the WordPress admin panel. Admins can enable or disable Google, Apple, and other providers without touching any code. Client IDs, sort order — all adjustable from the plugin settings screen.
For testers: try both providers, test logout, try signing in again. The session should feel seamless.