service add APP_SIGNATURE_SERVICE 1

core/Auth/JwtService.php

@@ -267,6 +267,8 @@ class JwtService
                 error_log("[SECURITY] HMAC mismatch | user: $userId | IP: " . ($_SERVER['REMOTE_ADDR'] ?? '?'));
                 self::abort(403, 'Invalid HMAC signature');
             }
+
+
         }
 
         return $decoded;