In JetBrains JetBrains Gateway before 2022.3 a client could connect without a valid token if the host consented.