add ms to access token to randomize it

src/server/UserResolver.spec.ts

@@ -60,6 +60,7 @@ describe("resolver of user", () => {
 				expect(jwtLifetime).toBeGreaterThanOrEqual(oneMinute)
 				expect(jwtLifetime).not.toBeGreaterThan(sixteenMinutes)
 				expect(jwtPayload.userId).toBe(user.id)
+				expect(jwtPayload.ms).toBeLessThan(1000)
 				expect(response.errors).toBeUndefined()
 			})
 		)

src/server/userResolver/auth.ts

@@ -16,8 +16,9 @@ export const comparePasswords = async (hash: string, plain: string) => {
 
 export const signAccessToken = (payload: ContextPayload) => {
     const accessTokenSecret = process.env.ACCESS_SECRET as string
+    const payloadWithMs = { ...payload, ms: Date.now() % 1000 }
 
-	return jwtSign(payload, accessTokenSecret, {
+    return jwtSign(payloadWithMs, accessTokenSecret, {
         expiresIn: parseInt(process.env.ACCESS_EXPIRY as string),
     })
 }
@@ -84,4 +85,5 @@ type JWTPayload = {
     userId: number
     iat: number
     exp?: number
+    ms?: number
 }