@@ -340,7 +340,7 @@ internals.Auth.prototype._authenticate = function (request, next) {
     // Injection bypass
 
     if (request.auth.credentials) {
-        return validate(null, 'bypass', { credentials: request.auth.credentials });
+        return validate(null, 'bypass', { credentials: request.auth.credentials, artifacts: request.auth.artifacts });
     }
 
     // Authenticate
 
@@ -50,9 +50,9 @@
     "wreck": "5.x.x"
   },
   "scripts": {
-    "test": "node node_modules/lab/bin/lab -a code -t 100 -L",
-    "test-tap": "node node_modules/lab/bin/lab -a code -r tap -o tests.tap",
-    "test-cov-html": "node node_modules/lab/bin/lab -a code -r html -o coverage.html",
+    "test": "lab -a code -t 100 -L",
+    "test-tap": "lab -a code -r tap -o tests.tap",
+    "test-cov-html": "lab -a code -r html -o coverage.html",
     "changelog": "mdchangelog --no-prologue --no-orphan-issues --overwrite --order-milestones semver --order-issues closed_at --dependents --remote hapijs/hapi --same-org --timeout 120000"
   },
   "license": "BSD-3-Clause"
 
@@ -1106,6 +1106,43 @@ describe('authentication', function () {
                 done();
             });
         });
+
+        it('passes the options.artifacts object, even with an auth filter', function (done) {
+
+            var server = new Hapi.Server();
+            server.connection();
+            server.auth.scheme('custom', internals.implementation);
+            server.auth.strategy('default', 'custom', true, { users: { steve: {} } });
+            server.route({
+                method: 'GET',
+                path: '/',
+                config: {
+                    handler: function (request, reply) {
+
+                        return reply(request.auth.artifacts);
+                    },
+                    auth: 'default'
+                }
+            });
+
+            var options = {
+                url: '/',
+                headers: { authorization: 'Custom steve' },
+                credentials: { foo: 'bar' },
+                artifacts: { bar: 'baz' }
+            };
+
+            server.inject(options, function (res) {
+
+                expect(res.statusCode).to.equal(200);
+                expect(res.result.bar).to.equal('baz');
+                done();
+            });
+
+
+
+        });
+
     });
 
     describe('payload()', function () {
Original file line number	Diff line number	Diff line change
`@@ -340,7 +340,7 @@ internals.Auth.prototype._authenticate = function (request, next) {`
`340`	`340`	`// Injection bypass`
`341`	`341`
`342`	`342`	`if (request.auth.credentials) {`
`343`		`- return validate(null, 'bypass', { credentials: request.auth.credentials });`
	`343`	`+ return validate(null, 'bypass', { credentials: request.auth.credentials, artifacts: request.auth.artifacts });`
`344`	`344`	`}`
`345`	`345`
`346`	`346`	`// Authenticate`