Debugging Strategy Helper

Symptom: users intermittently logged out after a few minutes. Expected: a session lasts the configured 24 hours. Likely causes ranked: 1) token expiry set too low — check the TTL config value. 2) multiple server instances with different secrets — verify all share the same signing key. 3) clock skew between servers — compare system times. 4) a load balancer dropping the session cookie — inspect response headers. First thing to try: log the token issue and expiry timestamps on each request and compare to the actual logout time; that quickly separates an expiry bug from an infrastructure one. Add logging at token verification.