Open
Description
It's worth looking into whether there could be any mechanisms by which we can instrument the service code to make it more obvious if something is wrong. For example, we could use assert! (which gets disabled/removed from release code, as @hug-dev has noted) to verify that data has the correct format etc. throughout our providers/authenticators.