How do I know what changed between these versions in subject? An internal client of mine reports that there is a change in the behaviour between these versions. He is observing in 3.4.1 that, keycloak redirects the user to the service after access token expirey and before the session timeout where in he expected to be redirected to the login page.