PendingAuthStore

Platform-agnostic persistence for the in-flight login (PendingAuth). Consumers provide the storage backend — the module handles serialization.

Android consumers should supply a durable, encrypted implementation. The default InMemoryPendingAuthStore cannot survive process death, which is precisely the case that breaks sign-in on memory-constrained devices. Reuse whatever backing store already holds the OAuthSession (DataStore + Tink, EncryptedSharedPreferences, …) under a separate key.

Unlike OAuthSessionStore.save, a deferred write here is merely inconvenient rather than destructive — nothing has been consumed server-side at save time. It still must be durable before the browser is launched, so prefer a synchronous commit anyway.

Inheritors