How can I correctly pass data from VK ID SDK to NextAuth.js v5 ?

[sergei-kh]

Since the default VK provider in this package doesn't work correctly, we implemented token retrieval using the VK ID SDK.
However, I have a question: how can I securely pass the data obtained from the SDK to NextAuth.js v5?
Currently, I'm passing the user's token to the CredentialsProvider and retrieving the user_info in the authorize callback, but I'm not sure if this is secure.