feat: T-911 handle JWT token expiration

app/controllers/concerns/authenticable_user.rb

@@ -15,6 +15,8 @@ def token
 
   def decoded_token
     @decoded_token ||= JWT.decode(token, Rails.application.secrets.secret_key_base, true, decode_options)
+  rescue JWT::DecodeError => e
+    raise e if e.is_a?(JWT::ExpiredSignature) || Rails.env.development?
   end
 
   def valid_token?

app/controllers/graphql_controller.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 class GraphqlController < ApplicationController
   include AuthenticableUser
   # If accessing from outside this domain, nullify the session
@@ -14,8 +16,11 @@ def execute
     }
     result = LagoApiSchema.execute(query, variables: variables, context: context, operation_name: operation_name)
     render json: result
+  rescue JWT::ExpiredSignature
+    render_graphql_error(code: 'expired_jwt_token', status: 401)
   rescue StandardError => e
     raise e unless Rails.env.development?
+
     handle_error_in_development(e)
   end
 
@@ -47,4 +52,16 @@ def handle_error_in_development(e)
 
     render json: { errors: [{ message: e.message, backtrace: e.backtrace }], data: {} }, status: 500
   end
+
+  def render_graphql_error(code:, status:, message: nil)
+    render json: {
+      data: {},
+      errors: [
+        {
+          message: message || code,
+          extensions: { status: status, code: code }
+        }
+      ]
+    }
+  end
 end

app/graphql/types/error_enum.rb

@@ -3,6 +3,7 @@ class ErrorEnum < BaseEnum
     value 'internal_error'
     value 'unauthorized'
     value 'token_encoding_error'
+    value 'expired_jwt_token'
 
     value 'incorrect_login_or_password'
     value 'user_already_exists'