Socket.IO JWT middleware token expiration handling on reconnection
The default @socket.io/jwt middleware validates a JWT only during the initial handshake. In Socket.IO v4.x the connection remains open after the token expires unless the server explicitly re‑validates on each reconnection or per message. Because the middleware does not enforce a maximum token lifetime beyond the handshake, a client with an expired token can