I removed the access and refresh tokens that you leaked. This should be kept secret they are literally passwords…
I’m unfamiliar with passport, but it seems like you didn’t tell password where it could get and fetch profile so it didn’t go and fetch any data to populate profile with.