The code metcap returns for a token it no longer recognises.
Worth knowing by name because a metcap login is DESTRUCTIVE: issuing a token
for a credential revokes the tokens issued to that credential before it. Two
holders of one credential therefore log each other out, and this is the code
the loser sees — on a token that may be seconds old and nowhere near its
advertised expiresAt.
The code metcap returns for a token it no longer recognises.
Worth knowing by name because a metcap login is DESTRUCTIVE: issuing a token for a credential revokes the tokens issued to that credential before it. Two holders of one credential therefore log each other out, and this is the code the loser sees — on a token that may be seconds old and nowhere near its advertised
expiresAt.