I believe the issue is about the token verification in this helper function.

Yes, the error is thrown by jwt.verify. I can mainly think of these causes: 1. your token is malformed 2. your client does not send the token properly with the request headers (in the case of GraphQL Playground you have to add it in the headers section) 3. your token is not encoded with the correct secret