code: func (authProvider *ecrAuthProvider) IsTokenValid(authData *ecrapi.AuthorizationData) bool {
  	if authData == nil || authData.ExpiresAt == nil {
  		return false
  	}
  
  	refreshTime := aws.TimeValue(authData.ExpiresAt).
  		Add(-1 * retry.AddJitter(MinimumJitterDuration, MinimumJitterDuration))
  
  	return time.Now().Before(refreshTime)
  }
docs: // IsTokenValid checks the token is still within it's expiration window. We early expire to allow
  // for timing in calls and add jitter to avoid refreshing all of the tokens at once.