Passport 0.6 deserializeUser error handling divergence between done(err) and done(null, false)
This question addresses how Passport 0.6's deserializeUser callback should distinguish between a missing user record and an operational failure when reconstructing req.user, given the framework's changed error propagation model. The 0.6 release shifted authenticate middleware error handling from throwing to next(err), which alters how strategy failures propa