An auth error would be incorrect at this point because this is just pointing out that there is a poorly formed type definition (because there is no expression). I think the response is better handled in the server. But I will update it with your suggestions.