api/auth.go in Ansible Semaphore prior to 2.8.89 mishandles authentication.
ansible-semaphore ansible semaphore