#credential-expiration

Unresolved Behavior: Credential Expiration Handling in Racket Auth Module

Goal Determine whether Racket’s built‑in racket/auth module automatically invalidates credentials once their credential-expiration timestamp passes, or whether this enforcement must be handled entirely by application code. Current Constraints The auth module provides require-credentials to guard handlers, but it returns a generic 401 for both invalid and exp