Custom_Script_Logged_Out & PAT expired after upgrade to 4.6.0

[dmonn]

Description:

We just updated from the previous version to 4.6.0. We have RocketChat embedded via iframe and use an auth token to log users in. After the upgrade via Docker-Compose, we're seeing Custom_Script_Logged_Out being called and the authentication failing. The PATs we used to log in the user no longer worked.

After regenerating PATs for all of the users, things worked again.

Steps to reproduce:

1. Set up chat in iframe, use PATs to log in
2. Upgrade Rocketchat / Restart server
3. Log events to see -> Custom_Script_Logged_Out
4. PATs no longer work

Expected behavior:

I'd expect PATs to continue to work after a restart.

Actual behavior:

PATs no longer worked

Server Setup Information:

Client Setup Information

• Desktop App or Browser Version: Browser, Chrome 99
• Embedding via iframe, logged in with token

Relevant logs:

[sampaiodiego]

this may have been caused by #24901
I'll ask someone to take a look