Product
SuperTokens Core fails to validate dashboard session expiry at the API level, relying instead on a periodic cleanup task.