Nginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enable

Summary Standalone short tokens issued for WebSocket and explicit-token authentication can survive administrative revocation in cache. If the same account is later re-enabled before the cache entry expires, the deleted short token becomes valid again. Details GenerateShortToken creates an AuthTok...