Unresolved strategy choice for Passport.js unit tests without live credentials?
Goal Test a Passport.js authentication flow in a local test environment while avoiding any calls to external OAuth providers. The test must simulate the provider’s token exchange, user profile retrieval, and session handling without using real production credentials. Constraints To keep the tests deterministic, the OAuth endpoints must be intercepted (e.g.,