Currently it seems you can only return nothing or a generic knock error, but nothing about why the request actually failed.

I'd like to be able to include error messages for when a token is requested, but a user isn't activated for example.

Or since I authenticate by phone number or email an error message when the identifier doesn't find a record in the database.