From 2dc7fa5df8a041ec374dff197d37ed5253eef730 Mon Sep 17 00:00:00 2001
From: Jerome <jerome@anthropic.com>
Date: Sun, 23 Feb 2025 10:57:26 +0000
Subject: [PATCH] Check token expiry in bearer auth

---
 src/server/auth/middleware/bearerAuth.ts | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/server/auth/middleware/bearerAuth.ts b/src/server/auth/middleware/bearerAuth.ts
index 14109e17..cd1b314a 100644
--- a/src/server/auth/middleware/bearerAuth.ts
+++ b/src/server/auth/middleware/bearerAuth.ts
@@ -55,6 +55,11 @@ export function requireBearerAuth({ provider, requiredScopes = [] }: BearerAuthM
         }
       }
 
+      // Check if the token is expired
+      if (!!authInfo.expiresAt && authInfo.expiresAt < Date.now() / 1000) {
+        throw new InvalidTokenError("Token has expired");
+      }
+
       req.auth = authInfo;
       next();
     } catch (error) {