As before, better not to assert here.  I'd suggest `else if (is_auth_failure_request(_type)) { ... } else { /* log error and return negative reply */ }`.