fix: keep expired credentials for AWS rejection

src/library/__tests__/credentials.test.ts

@@ -68,13 +68,13 @@ describe('credentials', () => {
       expect(result).toBeNull();
     });
 
-    it('should return null and clear storage when credentials are expired', async () => {
+    it('should return expired credentials to let AWS reject them', async () => {
       const getSpy = chrome.storage.local.get as jest.Mock;
       getSpy.mockImplementationOnce(() => Promise.resolve({ awsCredentials: expiredCredentials }));
 
       const result = await getValidCredentials();
-      expect(result).toBeNull();
-      expect(chrome.storage.local.remove).toHaveBeenCalledWith('awsCredentials');
+      expect(result).toEqual(expiredCredentials);
+      expect(chrome.storage.local.remove).not.toHaveBeenCalled();
     });
 
     it('should return null when credentials are incomplete', async () => {

src/library/credentials.ts

@@ -21,20 +21,14 @@
     return null;
   }
 
   if (
     !credentials.accessKeyId ||
     !credentials.secretAccessKey ||
-    !credentials.sessionToken ||
-    !credentials.expiration
+    !credentials.sessionToken
   ) {
     return null;
   }
 
-  if (areCredentialsExpired(credentials.expiration)) {
-    await chrome.storage.local.remove('awsCredentials');
-    return null;
-  }
-
   return credentials;
 }
 

src/options.ts

@@ -333,7 +333,7 @@ document.addEventListener('DOMContentLoaded', async () => {
 
       const awsCredentials = await getValidCredentials();
       if (!awsCredentials) {
-        showToastMessage('warning', 'Session expired — please sign in to AWS again.');
+        showToastMessage('warning', 'No AWS credentials found. Please sign in to AWS first.');
         return;
       }
 

src/popup.ts

@@ -140,7 +140,7 @@ function setupEventListeners(): void {
         const awsCredentials = await getValidCredentials();
 
         if (!awsCredentials) {
-          showToastMessage('warning', 'Session expired — please sign in to AWS again.');
+          showToastMessage('warning', 'No AWS credentials found. Please sign in to AWS first.');
           return;
         }