Comment by hellojebus

We use the 418 response code in our authentication service. We use to determine whether the token is invalid due to expiration, vs any other reason. If 418, we know to refresh to access token automatically... pretty harmless and definitely not a security measure.