Passport.js local and JWT strategies: verify callback argument consistency
The goal is to clarify whether the verify callback supplied to a Passport.js strategy must always receive three arguments (err, user, info) or may receive only two arguments (err, user) when the strategy does not generate an info object. Current Passport documentation leaves this behavior unspecified, and individual strategies such as passport-local and pass