supabase / auth / 27142563498

71%

push

github

fix: check session state for admin tokens (#2555)

## What kind of change does this PR introduce?

Bug fix

## What is the current behavior?

Middleware validates the session token has not expired.

## What is the new behavior?

Validates the token has not expired and that the session has not been
revoked.

## Additional context

Middleware checks for admin tokens should validate that the session is
still live. JWTs may be revoked but stay valid until the expiry time.

17 of 17 new or added lines in 1 file covered. (100.0%)

17674 of 24846 relevant lines covered (71.13%)

651.61 hits per line