Verify the selection token

import {
  fetchAtmosphereLoginPublicJwkForToken,
  verifyAtmosphereLoginCallback,
} from "https://login.atmosphereaccount.com/atmosphere-login-server.js";

const callbackUrl = new URL(request.url);
const selectionToken = callbackUrl.searchParams.get("selection_token");
if (!selectionToken) throw new Error("Missing selection token");

const publicJwk = await fetchAtmosphereLoginPublicJwkForToken(
  selectionToken,
  "https://login.atmosphereaccount.com",
);

const result = await verifyAtmosphereLoginCallback({
  url: callbackUrl,
  publicJwk,
  expectedIssuer: "https://login.atmosphereaccount.com",
  expectedClientId: "https://app.example.com/oauth/client-metadata.json",
  expectedState,
  expectedReturnUri: "https://app.example.com/auth/atmosphere/selected",
  replayStore,
});

if (!result.ok) throw new Error(result.error);
const loginHint = result.claims.handle || result.claims.sub;