await

Blocks until the caller has approved at url, then returns the principal, whose user id is the one the authenticator resolves.

(xtdb.authn/failed) if the authorisation fails or expires.