open-nomad/.changelog/15013.txt

```release-note:security
event stream: Fixed a bug where ACL token expiration was not checked when emitting events
```
event stream: ensure token expiry is correctly checked for subs. This change ensures that a token's expiry is checked before every event is sent to the caller. Previously, a token could still be used to listen for events after it had expired, as long as the subscription was made while it was unexpired. This would last until the token was garbage collected from state. The check occurs within the RPC as there is currently no state update when a token expires. 2022-10-24 13:32:18 +00:00			```release-note:security
			`event stream: Fixed a bug where ACL token expiration was not checked when emitting events`
			```