The documentation for sessionToken from monday-sdk-js states that the sessionToken is signed with your app secret when it is actually signed with client secret
Login to monday.com
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.