Logging error for broken or expired JWT should not use error level, it's expected error, so it should probably use warning. https://github.com/theforeman/foreman/blob/f4b4ab58fe8ea4f8000179ff6fde8dadfc0042c1/app/services/sso/jwt.rb#L15-L20