If a workspace is started multiple times, resources may not be invalidated. This means an auth token can be reused for a workspace. coderd closes old agent connections, so this is expected behavior, and the agent will reconnect properly.
coderd