How I Found an SSRF in an AI SDK's OAuth Metadata Discovery

Some bugs announce themselves. You're reading through a codebase and the vulnerability practically...