mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-02-09 21:04:14 -05:00
this doesn't include timeouts or other errors on the browser side - the main thing this catches is if the token doesn't belong to the user. However I'm not entirely clear if that's something that will be caught at this point, or if the browser would reject that key as it's not in the credentials passed in to the begin_authentication process.