When making a request using an expired JWT, it looks like it is treated as an anonymous user, rather than sending back an error.
Is that the intended behaviour?
It seems it would be better to return an error (that's what is usually recommended with JWT implementation)
Postponed: needs info
Documentation
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.