Fix active session must not be return if expired

Signed-off-by: Bryan Frimin <bryan@getprobo.com>

pkg/iam/session_service.go

@@ -300,6 +300,14 @@ func (s SessionService) GetActiveSessionForMembership(ctx context.Context, rootS
 				return fmt.Errorf("cannot load child session: %w", err)
 			}
 
+			if childSession.ExpireReason != nil {
+				return NewSessionExpiredError(childSession.ID)
+			}
+
+			if time.Now().After(childSession.ExpiredAt) {
+				return NewSessionExpiredError(childSession.ID)
+			}
+
 			return nil
 		},
 	)