Processes ke2 and returns authU for /auth/login/finish. Throws opaque_failed on a wrong password (or a fake record for an unknown email); the caller should show the same message as a 401.
ke2
authU
opaque_failed
Processes
ke2and returnsauthUfor /auth/login/finish. Throwsopaque_failedon a wrong password (or a fake record for an unknown email); the caller should show the same message as a 401.