anchor.diff:                             :parameters (list (cons "id_token" id-token))
                              :method :get
                              :accept "application/json;charset=utf-8")
  -    (declare (ignore stream stream-closed-p))
  +    (declare (ignore response-headers stream stream-closed-p))
       (assert (<= 200 status 299) ()
               "While validating Google sign-in token, error ~D: ~A returned by ~A"
               status status-reason response-uri)
  
positive.code:       (assert (< (parse-integer (getf response :exp))
                   (local-time:timestamp-to-unix (local-time:now))) ()
                   "The Google sign-in permission has already expired.")
        (getf response :sub))))
  
  (defun render-player-details (registrar opaque-id)
    (let ((player-entity (find-player-entity :registrar registrar opaque-id :self)))
      (render-json `((:sign-in . ((:registrar . ,registrar)
                                  (:id ,opaque-id)))))))
  
  (defroute ("/tootstest/login/registrars/:registrar" :method :post)
      (&key registrar id-token)
    (handler-case
        (let ((user (ecase (make-keyword (string-upcase registrar))
                      (:google (user<-google-token id-token))
                      (:facebook (error "Facebook sign-in is not yet supported")))))
          (when user
            (render-player-details :google user))) 
      (error (c)
        (render-json `((:error . (princ-to-string c)))))))
  
  
  
negative.code:    :json-arrays-as-vectors t))
  
  (defun get-google-public-key ()
    "Either fetch  the Google  public-key for OpenID,  or, use  the cached
  copy in *GOOGLE-PUBLIC-KEY*"
    (or *google-public-key*
        (setf *google-public-key*
              (fetch-json (getf (fetch-json "https://accounts.google.com/.well-known/openid-configuration")
  