With two-factor authentication, we won’t get back an accessToken after the first factor is authenticated (email/password, for example). The session behavior has been updated to only try to decode an accessToken if one exists, otherwise it will return whatever response is given by the server.
With two-factor authentication, we won’t get back an accessToken after the first factor is authenticated (email/password, for example). The session behavior has been updated to only try to decode an accessToken if one exists, otherwise it will return whatever response is given by the server.