This check is true if the context private.ash_authentication? is set to true.

This context will only ever be set in code that is called internally by ash_authentication, allowing you to create a bypass in your policies on your user/user_token resources.

policies do
  bypass AshAuthenticationInteraction do
    authorize_if always()
  end
end