oauth is slightly different than our other authentication mechanisms due to the additional external double redirect. When two-factor is enabled - for login/us-signin/webauthn the JSON response will indicate that a second factor is required - but for oauth one can't respond since the actual authentication request is really a callback from the oauth provider - instead - we probably need yet another special redirect view to handle this case.
oauth is slightly different than our other authentication mechanisms due to the additional external double redirect. When two-factor is enabled - for login/us-signin/webauthn the JSON response will indicate that a second factor is required - but for oauth one can't respond since the actual authentication request is really a callback from the oauth provider - instead - we probably need yet another special redirect view to handle this case.