How to fix auth/session-cookie-expired: Firebase session cookie expired in Firebase

// When creating a session cookie, check the expiresIn value
const expiresIn = 60 * 60 * 24 * 5 * 1000; // 5 days in milliseconds

admin.auth().createSessionCookie(idToken, { expiresIn })
  .then((sessionCookie) => {
    console.log('Session cookie created with expiration:', expiresIn);
  });

const sessionCookie = req.cookies.session || '';

admin.auth().verifySessionCookie(sessionCookie, true)
  .then((decodedClaims) => {
    // Session is valid
    console.log('User authenticated:', decodedClaims.uid);
  })
  .catch((error) => {
    if (error.code === 'auth/session-cookie-expired') {
      // Clear the expired cookie and redirect to login
      res.clearCookie('session');
      return res.redirect('/login');
    }
    // Handle other errors
    console.error('Session verification error:', error);
  });

// Example: Set to 14 days (maximum allowed)
const expiresIn = 60 * 60 * 24 * 14 * 1000; // 14 days in milliseconds

admin.auth().createSessionCookie(idToken, { expiresIn })
  .then((sessionCookie) => {
    // Set the cookie with matching expiration
    const options = {
      maxAge: expiresIn,
      httpOnly: true,
      secure: true,
      sameSite: 'strict'
    };
    res.cookie('session', sessionCookie, options);
  });

// Middleware to refresh session cookie before expiration
async function refreshSessionIfNeeded(req, res, next) {
  const sessionCookie = req.cookies.session;

  try {
    const decodedClaims = await admin.auth().verifySessionCookie(sessionCookie);

    // Check if cookie is close to expiration (e.g., less than 1 day left)
    const expirationTime = decodedClaims.exp * 1000; // Convert to milliseconds
    const oneDayFromNow = Date.now() + (24 * 60 * 60 * 1000);

    if (expirationTime < oneDayFromNow) {
      // Create a new session cookie
      const newExpiresIn = 60 * 60 * 24 * 14 * 1000; // 14 days
      const newSessionCookie = await admin.auth().createSessionCookie(
        await admin.auth().createCustomToken(decodedClaims.uid),
        { expiresIn: newExpiresIn }
      );

      res.cookie('session', newSessionCookie, {
        maxAge: newExpiresIn,
        httpOnly: true,
        secure: true
      });
    }

    next();
  } catch (error) {
    res.clearCookie('session');
    res.redirect('/login');
  }
}

// Client-side: Check session validity before critical operations
async function checkSession() {
  try {
    const response = await fetch('/api/verify-session', {
      credentials: 'include'
    });

    if (!response.ok) {
      // Session expired or invalid
      window.location.href = '/login?session=expired';
    }
  } catch (error) {
    console.error('Session check failed:', error);
  }
}

// Check session periodically (e.g., every 5 minutes)
setInterval(checkSession, 5 * 60 * 1000);