Login
Member login is for humans. API keys are still Bearer tokens for software. You can have both.
The public login page only shows doors that are live on this host. Email always works. After Google or GitHub, fetch.li creates or merges an account, signs you in, and asks for a name if the provider did not send one. Failed passwords are checked against a dummy hash so missing accounts do not answer faster than real ones. Too many failures lock that email hash and that network.
Connect another live provider from the account page while signed in. Verified emails merge so you do not collect a second person.
GET /v1/auth/{provider}/start begins the door. The callback sets the session cookie and returns you to the account page.