clear conflict

Author: anandshukla15

backend/src/controllers/authController.ts

@@ -36,9 +36,13 @@ export const registerUser = async (req: Request, res: Response, next: NextFuncti
     const typedUser = asTypedUser(newUser);
 
     const token = generateToken(typedUser._id.toString());
-const decoded = jwt.decode(token) as { exp?: number };
-const expiresAt = new Date((decoded.exp ?? 0) * 1000);
+const decoded = jwt.decode(token) as { exp?: number } | null;
 
+if (!decoded || !decoded.exp) {
+  throw new Error("Invalid token format or missing expiration");
+}
+
+const expiresAt = new Date(decoded.exp * 1000);
 await Session.create({
   userId: typedUser._id,
   token,
@@ -85,8 +89,13 @@ export const loginUser = async (req: Request, res: Response, next: NextFunction)
     const typedUser = asTypedUser(foundUser);
 
       const token = generateToken(typedUser._id.toString());
-const decoded = jwt.decode(token) as { exp?: number };
-const expiresAt = new Date((decoded.exp ?? 0) * 1000);
+const decoded = jwt.verify(token, process.env.JWT_SECRET!) as { exp?: number };
+
+if (!decoded.exp) {
+  throw new Error("Token missing expiration claim");
+}
+
+const expiresAt = new Date(decoded.exp * 1000);
 
 await Session.create({
   userId: typedUser._id,

backend/src/server.ts

@@ -4,7 +4,7 @@ import { createServer } from "http";
 import { Server as SocketIOServer } from "socket.io";
 import dotenv from "dotenv";
 import cors from "cors";
-import cron from "node-cron";
+
 import { Session } from "./models/sessionModel.js";
 import { ChatMessage } from "./models/chatMessageModel.js"; // <-- make sure this file exists and exports model
 import app from "./app.js";
@@ -105,16 +105,16 @@ mongoose
     console.log("🗄️  MongoDB connected successfully!");
 
 
-    cron.schedule("0 2 * * *", async () => {
-      const expiryDate = new Date();
-      expiryDate.setDate(expiryDate.getDate() - 7);
-      try {
-        const result = await Session.deleteMany({ createdAt: { $lt: expiryDate } });
-        console.log(`🧹 Cleanup complete — ${result.deletedCount} expired sessions removed`);
-      } catch (error) {
-        console.error("❌ Session cleanup failed:", error);
-      }
-    });
+    // cron.schedule("0 2 * * *", async () => {
+    //   const expiryDate = new Date();
+    //   expiryDate.setDate(expiryDate.getDate() - 7);
+    //   try {
+    //     const result = await Session.deleteMany({ createdAt: { $lt: expiryDate } });
+    //     console.log(`🧹 Cleanup complete — ${result.deletedCount} expired sessions removed`);
+    //   } catch (error) {
+    //     console.error("❌ Session cleanup failed:", error);
+    //   }
+    // });
 
 
     httpServer.listen(PORT, () => {