Token must expire the exact time of "exp" claim

src/Token.php

@@ -298,7 +298,7 @@ public function isExpired(DateTimeInterface $now = null)
 
         $now = $now ?: new DateTimeImmutable();
 
-        return $now > $this->claims->get(RegisteredClaims::EXPIRATION_TIME);
+        return $now >= $this->claims->get(RegisteredClaims::EXPIRATION_TIME);
     }
 
     /**

test/unit/TokenTest.php

@@ -956,6 +956,29 @@ public function isExpiredShouldReturnTrueAfterTokenExpires()
         $this->assertTrue($token->isExpired(new DateTime('+10 days')));
     }
 
+    /**
+     * @test
+     *
+     * @covers ::isExpired
+     *
+     * @uses \Lcobucci\JWT\Token::__construct
+     * @uses \Lcobucci\JWT\Token::convertToDataSet
+     * @uses \Lcobucci\JWT\Token::getClaim
+     * @uses \Lcobucci\JWT\Token::hasClaim
+     * @uses Lcobucci\JWT\Claim\Basic
+     * @uses Lcobucci\JWT\Claim\GreaterOrEqualsTo
+     */
+    public function isExpiredShouldReturnTrueAtTheSameTimeTheTokenExpires()
+    {
+        $now = new DateTimeImmutable();
+        $token = new Token(
+            ['alg' => 'none'],
+            ['exp' => $now]
+        );
+
+        $this->assertTrue($token->isExpired($now));
+    }
+
     /**
      * @test
      *

test/unit/Validation/Constraint/ValidAtTest.php

@@ -144,7 +144,7 @@ public function assertShouldNotRaiseExceptionWhenLeewayIsUsed()
             RegisteredClaims::EXPIRATION_TIME => $now->modify('-5 seconds'),
         ];
 
-        $constraint = new ValidAt($this->clock, new DateInterval('PT5S'));
+        $constraint = new ValidAt($this->clock, new DateInterval('PT6S'));
         $constraint->assert($this->buildToken($claims));
 
         $this->addToAssertionCount(1);