That is from my understanding the protocol just requires replaying the request (on `WWW-Authenticate: TokenChallenge` header) with the token (in `Authorization: token ...` header), which in Manifest V2 extension is easy, but Manifest V3 made it impossible to do directly within the extension.