SignIn(...) derives a local token from the optional cancellationToken, but the Bot Framework API calls in this method (e.g., Api.Users.Token.GetAsync, Api.Conversations.CreateAsync, Api.Bots.SignIn.GetResourceAsync) still use Context.Api’s internal cancellation token. If a caller passes a non-default token, it won’t cancel those requests; consider using an ApiClient instance constructed with token for all API calls in this method (or drop the parameter if it can’t be honored consistently).
Originally posted by @Copilot in #317 (comment)
SignIn(...)derives a localtokenfrom the optionalcancellationToken, but the Bot Framework API calls in this method (e.g.,Api.Users.Token.GetAsync,Api.Conversations.CreateAsync,Api.Bots.SignIn.GetResourceAsync) still useContext.Api’s internal cancellation token. If a caller passes a non-default token, it won’t cancel those requests; consider using anApiClientinstance constructed withtokenfor all API calls in this method (or drop the parameter if it can’t be honored consistently).Originally posted by @Copilot in #317 (comment)