ForwardAuth middleware missing native token expiry validation
Traefik's ForwardAuth middleware delegates authentication to an external service and relies on that service to return HTTP 2xx with optional user-info headers before allowing a request to reach the backend. The middleware does not inspect or validate the contents of tokens—such as JWT expiry, audience, or scope claims—that are forwarded in request headers; i
traefikproxy