support auth param discovery or explicit passing