Pretty much. Imagine we have a “continue as guest” option that gives up on being authorized, so the token stream could complete without ever having sent anything. I think I would prefer any pending authorization-needed intercepted requests that are waiting on tokens to recognize that situation as “not normal”.
↧