(feat): improvements to the slow

example/README.md

@@ -30,6 +30,8 @@ Set `TAUTH_PRIVATE_KEY` in `backend/.env`. Generate keys with:
 pnpm --filter @tauth-example/backend exec cargo run --bin generate_keys
 ```
 
+Publish the generated `TAUTH_PUBLIC_KEY_SHA256` value in the `tauth.<identifier>` TXT record. TAuth receives the full public key during authorization and verifies it against that hash.
+
 For local callback testing, `TAUTH_REDIRECT_URL` must be reachable by TAuth. Use a tunnel if needed.
 
 ## Run

example/backend/Cargo.lock

@@ -1990,6 +1990,7 @@ dependencies = [
  "reqwest",
  "serde",
  "serde_json",
+ "sha2 0.10.9",
  "thiserror 2.0.18",
  "tokio",
  "url",

example/backend/src/bin/generate_keys.rs

@@ -3,4 +3,5 @@ fn main() {
 
     println!("TAUTH_PRIVATE_KEY={}", keys.private);
     println!("TAUTH_PUBLIC_KEY={}", keys.public);
+    println!("TAUTH_PUBLIC_KEY_SHA256={}", keys.public_hash);
 }