Remove need to provide issuer url
You can loop over the list of supported providers.
Even better you can mark those OPs that support JWTs. Then you have two cases:
- AT is a jwt => Use the provider specified
- AT is not a jwt => cycle over all non-jwt OPs
To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information