- feat: cover jwt expired case

Author: koladev32

api/authentication/serializers/login.py

@@ -55,7 +55,10 @@ def validate(self, data):
             )
             if not session.token:
                 raise ValueError
-        except (ObjectDoesNotExist, ValueError):
+
+            jwt.decode(session.token, settings.SECRET_KEY, algorithms=["HS256"])
+
+        except (ObjectDoesNotExist, ValueError, jwt.ExpiredSignatureError):
             session = ActiveSession.objects.create(
                 user=user,
                 token=_generate_jwt_token(user)