Function isOAuthCallback

apps/host-selfhost/src/auth/sso.ts:8–9

(path: string | undefined)

// stranger signed in at the IdP" from server-side creation (the seed, admin
// add-user), which never carries either.
export const isOAuthCallback = (path: string | undefined): boolean =>
  path?.startsWith("/oauth2/callback/") === true || path?.startsWith("/callback/") === true;

// The domain of a well-formed address, or null — so a malformed email can never
// match an allowlist entry (`emailDomain("@example.com")` is null, not "example.com").