Merge pull request #67 from Navigraph/fix/broken-token-expiry-check

Author: SkySails

.changeset/nice-eyes-sing.md

@@ -0,0 +1,5 @@
+---
+"@navigraph/auth": patch
+---
+
+Fixed token expiry check. Previously, a token would be considered expired 3 minutes **after** it expired, but the intention was to treat it as expired 3 minutes **before** its real expiry.

packages/auth/src/util/isExpiredToken.ts

@@ -11,5 +11,5 @@ export default function isExpiredToken(accessToken?: string, threshold = EXPIRY_
   if (!accessToken) return true;
   const decodedToken = decodeAccessToken(accessToken);
   if (!decodedToken) return true;
-  return decodedToken.exp * 1000 < Date.now() - threshold;
+  return decodedToken.exp * 1000 < Date.now() + threshold;
 }