From 11c40a75aca6bdcca5a3fa14923376f868b94388 Mon Sep 17 00:00:00 2001
From: Gregory Wells <gawells@tvroom.astraltech.xyz>
Date: Mon, 8 Jun 2026 18:37:51 -0400
Subject: [PATCH] handle cleanup

---
 src/session/session_manager.go | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/session/session_manager.go b/src/session/session_manager.go
index 627c78a..5037ea5 100644
--- a/src/session/session_manager.go
+++ b/src/session/session_manager.go
@@ -99,7 +99,12 @@ func (manager *SessionManager) GetSession(r *http.Request) (*SessionData, error)
 	if err != nil {
 		return nil, ErrSessionNotFound
 	}
-	// TODO: handle token expiry here
+
+	if time.Now().After(data.ExpiresAt) {
+		_ = manager.store.Delete(token)
+		return nil, ErrSessionExpired
+	}
+
 	return data, nil
 }