Review PR #742: rotate signing keys without logouts
Rotate signing keys without logging everyone outOpen
An assistant reworked token verification so a key rotation does not log everyone out. Five defects hide in the rework, and some untouched lines that look wrong are right.
AIOpened by the assistantsession_tokens.py
Your task
Review PR #742. Find the defects, place them on their lines, and rank them.
- read pr.diff, then file one entry in FINDINGS for each defect you find
- line is the line number in the NEW file, the numbers down the left of the diff
- severity is one of blocker, major, minor
- a finding filed against code this PR did not change is a false alarm
- the module's docstrings and comments are part of the contract; check the code against them
At submit, your findings are matched against the planted defects by file and line.