Function decrypt_provider_token 

pub fn decrypt_provider_token(
    key: &TokenEncryptionKey,
    stored: &str,
) -> Result<String, AuthError>

Decrypt a provider refresh token that was encrypted by encrypt_provider_token.

Equivalent to decrypt_provider_token_bound with empty AAD: "enc2:" values sealed with a non-empty binding fail closed here.