Thank you so much @ibacher , @janithrs, and @jayasanka for the detailed responses!
This really clarified things for me.
I also listened to the platform call recording and I’ll be going through it again to make sure I fully absorb everything that was discussed. I want to make sure my implementation reflects the right thinking from the ground up.
My next step is to move forward with the 401 + Location header approach in and make sure the O3 client handles it correctly on the frontend side.
Thanks again for the guidance :>