Enhance Security and Trust: New Session Metadata in Sign in with Google

Sign in with Google now adds two OpenID Connect standard claims, auth_time and amr (Authentication Methods Reference), letting developers verify when and how a user authenticated. These enable login freshness checks and detection of specific authentication methods, supporting dynamic risk-based access controls and step-up authentication for sensitive operations.