API Key Validation
Requests without valid API keys are rejected with 401 Unauthorized.
18 tests verify token validation, session handling, and authorization checks.
Requests without valid API keys are rejected with 401 Unauthorized.
JWT tokens are validated for signature, expiration, and claims.