fix auth token expiration

src/modules/auth/auth.module.ts

@@ -18,13 +18,17 @@ import { RefreshToken } from './entities/refresh-token.entity';
     UtilsModule,
     forwardRef(() => UserModule),
     JwtModule.registerAsync({
-      useFactory: (configService: ConfigService) => ({
-        global: true,
-        secret: configService.getOrThrow<string>('JWT_SECRET'),
-        signOptions: {
-          expiresIn: configService.getOrThrow<number>('JWT_EXPIRATION_TIME'),
-        },
-      }),
+      useFactory: (configService: ConfigService) => {
+        const expiresIn = configService.getOrThrow<number>('JWT_EXPIRATION_TIME');
+        return {
+          global: true,
+          secret: configService.getOrThrow<string>('JWT_SECRET'),
+          signOptions: {
+            // Use string format with time unit for explicit expiration (value should be in seconds)
+            expiresIn: `${expiresIn}s`,
+          },
+        };
+      },
       inject: [ConfigService],
     }),
     forwardRef(() => AdminModule),

src/modules/auth/services/tokens.service.ts

@@ -39,7 +39,10 @@ export class TokensService {
   }
 
   private generateAccessToken(payload: ITokenPayload | IAdminTokenPayload, expiresIn: number) {
-    return this.jwtService.signAsync(payload, { expiresIn });
+    // Ensure expiresIn is passed as a string with time unit for reliability
+    // JWT library accepts: number (seconds) or string with unit (e.g., "3600s", "1h")
+    // Using string format is more explicit and prevents unit confusion
+    return this.jwtService.signAsync(payload, { expiresIn: `${expiresIn}s` });
   }
 
   async storeRefreshToken(ownerId: string, restId: string, refreshToken: string, type: RefreshTokenType) {