AUDIT: Failed Authentication: Token

Hi All,
Looked in my audit and at times that are a few seconds before or after I logged into the web portal I get the following event:

Middleware
root
2024-08-18 10:36:33
Authentication
Failed Authentication: Token

Is this being triggered simply by the web interface attempting to use an old token from the previous session, the portal rejecting it, and then my new fresh login (which it accepts) creates a new token that isn’t logged?

Just wondering if ya’ll see this .

Otherwise maybe some parasite on my PC I use to access my webportal/truenas is making it’s own attempts?

I hope you have found your answear, but I was recently bugged with the same question and I have came to the conclusion that is has to do with the fact that I navigate to my server via bookmark in browser that probably tries to access old session and therefore results in the error everytime before my login.

This can happen if UI tries to use authentication token that is expired or invalidated (due to session logout).