Access token validation gives no indication when a token has failed

[ri-ch]

When using the access token middleware, if i pass an invalid token (expired, for example, the token has expired), the token validation fails, but the middleware will still call the next component in the pipeline. Is this expected behaviour? Is there a way to prevent this?

[leastprivilege]

Thats the expected behavior. The request is anonymous then.