# Authentication callback lifecycle

Source: Browser research

The authentication callback must complete
before the desktop window is created.

This matters because creating the window
too early can bypass the expected auth gate.

Tags:
- authentication
- desktop
- lifecycle