Token details are sorely lacking

Yes, but that’s an extra step. So for each user logging in, I’m making 3 requests (and they’re making one), which seems suboptimal, and an un-necessary load on your servers.