
If the client sends data before authentication is complete, it must not be discarded and it needs to be processed like as if it was sent in a separate network packet.
If the client sends data before authentication is complete, it must not be discarded and it needs to be processed like as if it was sent in a separate network packet.