CVE-2026-46405: Go Auth Response With Errorcve-2026-46405-go-auth-response-with-error
Returning a non-nil Auth object alongside a non-nil error in a response handler can cause caller handlers to create orphaned tokens or process invalid authentication state.