auth.provider API
    Preparing search index...

    Type Alias CsrfTokenVerdict

    CsrfTokenVerdict: "valid" | "absent" | "invalid"

    What the token arm concluded.

    absent and invalid are kept apart deliberately: absence is the ordinary state of a browser request that is relying on the origin arm, while invalid means material was presented and did not check out.