The token body excludes line breaks as well as the closing bracket. $ in a
JavaScript pattern already means end of input, so a trailing newline is
refused without help — but [^\]] alone would accept one in the middle of
the token, which no real Expo token contains.
The POST/DELETE /api/devices request body.
The token body excludes line breaks as well as the closing bracket.
$in a JavaScript pattern already means end of input, so a trailing newline is refused without help — but[^\]]alone would accept one in the middle of the token, which no real Expo token contains.