Use auth hook to wire in session validation and token refresh

[heskew]

No description provided.

[Copilot]

Pull Request Overview

This PR implements session validation using authentication hooks to automatically verify and refresh OAuth tokens when needed. This ensures OAuth sessions remain valid without requiring manual intervention.

Key changes:

• Added sessionValidate auth hook for automatic token refresh
• Enhanced security with redirect validation to prevent open redirect attacks
• Updated session structure to use authProvider and authProviderMetadata format

Reviewed Changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
src/index.ts	Adds sessionValidate auth hook for automatic token refresh and session validation
src/lib/handlers.ts	Updates session handling to use new metadata format and adds redirect validation
src/lib/OAuthProvider.ts	Implements processCallback and refreshTokensWithMetadata methods for session management
src/types.ts	Extends interfaces with new auth hooks and security configuration options
test/lib/handlers.test.js	Updates test mocks and assertions to match new session structure
test/options-watcher.test.js	Adds auth mock object to test scope
README.md	Documents new security features and configuration options

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}