Jared Hanson

It is unclear to me how adding an `Authorization` header would help with testing, specifically in relation to this strategy. Could you provide more information?

This PR isn't diff'ing cleanly. I'll attempt to review this and merge by hand.

Can you point me to some documentation on this so I can understand it better?

Thanks, that is interesting. I'm going to investigate this some more, and experiment with handling some of the flow on the client. At first read, if you are doing the...

After investigating this further, the `postmessage` flow that Google supports is entire a client-side. If you use this flow, the browser won't be redirected to your servers callback URL. Rather,...

I'm not 100% sure on all the ways to use this, but this was my impression: If you want to initiate this "postmessage" flow (which typically uses a popup window),...

Don't get me wrong, I think its great that your using this! What I'm not clear on, though, is why `callbackURL: 'postmessage'` needs to be set as an option in...

OK, thanks for the info. Re-opening as a reminder for myself to revisit this.

Cool, thanks for the pointer. You've got some quality modules! Kerouac is the static site generator I've always wanted, with a very Express-inspired API. Sometime soonish I'll be documenting it...

This seems to be related to how Nest is wrapping Passport, correct? If so, I think the issue would be best addressed in the wrapper rather than here. Passport is...