This was an auth extension or plugin for Apollo, forget what they called it.
Apollo shows up in the README and package.json, so I'm not sure why you are assuming I was not using a proper implementation