LimboAuth Session Exploit Issue — Players Rejoining Without Login Using ExitLag

I'd like to report an issue with the LimboAuth plugin. Currently, there's a significant problem where some players are using software called "exit lag" to rejoin the server even after they've left, without their session expiring. This allows them to transfer items and causes other issues. Could you please adjust the session timeout so that players are forced to log in again whenever they rejoin? This would significantly reduce the risk of this exploit. I believe this is a growing issue, so it would be great if you could look into it as soon as possible.

Thank you!

The issue names no files, tests, or entry points. Start by tracing LimboAuth's session handling for players who disconnect and rejoin, then reproduce the reported ExitLag scenario and determine where login state remains valid. Done means a returning player must authenticate again before transferring items or accessing the server.

Written by the indexing model from the issue text.