Ah. That makes sense. I figured that must be the case but didn’t see that in my quick read. I’d take a look at the other authentication plugins as a reference.
Here are official plugins with ‘auth’ in their name
discourse-apple-auth/ discourse-microsoft-auth/
discourse-authentication-validations/ discourse-oauth2-basic/
discourse-auth-no-email/ discourse-vk-auth/
discourse-development-auth/ discourse-wikimedia-auth/
Sounds like an interesting project