" plus the provider's * error fields, or a fixed text; never a raw response body or curl details. */ class OAuthException extends RuntimeException { }