Can we typehint here ($auth, $user)?