Apply ig-set-* response headers to a mutable session object.
acceptedAuthorization says whether the answer created the session's
authorization — the session had none and the answer handed it one. That is
the one fact every login path has in common, and the platform parser marks
the process from it (MarkSessionCreatedInProcess). A rotation of an
authorization the session already carried (the server refreshing a live
session) is not a login and reports false.
Apply ig-set-* response headers to a mutable session object.
acceptedAuthorizationsays whether the answer created the session's authorization — the session had none and the answer handed it one. That is the one fact every login path has in common, and the platform parser marks the process from it (MarkSessionCreatedInProcess). A rotation of an authorization the session already carried (the server refreshing a live session) is not a login and reportsfalse.