10:18a

Error is likely emitted from node/impl/common/common.go:AuthVerify

It is a method of CommonAPI.  It passes the token and the api secret to jwt.Verify to extract a payload with an Allow property.  jwt.Verify throws the causal error.

10:19a