<Project Sdk="Microsoft.NET.Sdk">

  <!--
    OIDC for a native public client: Authorization Code with PKCE on a loopback redirect.

    No package references at all, deliberately. The flow is fully specified by RFC 6749,
    RFC 7636 and RFC 8252, and the one thing a library would own for us — nonce generation
    and validation — is precisely what the identity-provider key binding needs to control
    exactly. See KeyBindingAuthorization.
  -->

  <ItemGroup>
    <InternalsVisibleTo Include="DodoSSH.Client.Auth.Tests" />
  </ItemGroup>

</Project>
