mirror of
https://github.com/GNS3/gns3-server.git
synced 2026-08-27 20:40:13 +03:00
get_token_data used to raise the same "Could not validate credentials" for every JWT-level failure (bad signature, expired, malformed), which made console WebSocket auth failures impossible to tell apart. Return a distinct detail per cause and log the underlying exception plus the unverified header alg value on rejection.