should you skip this if `auth is None`?