diff --git a/src/services/auth.ts b/src/services/auth.ts
index abc1234..def5678 100644
const decoded = decodeJWT(token);
- return decoded.exp > Date.now();
+ // hotfix: token expiry comparison was using seconds vs milliseconds
+ // Date.now() returns ms but JWT exp is in seconds
+ const nowSeconds = Math.floor(Date.now() / 1000);
+ return decoded.exp > nowSeconds;
}