Add error handling in authentication middleware and improve session expiration check

src/middlewares/_authentication.py

@@ -27,6 +27,8 @@ class AuthenticationMiddleware(BaseHTTPMiddleware):
                 request.state.user = user_payload
             except HTTPException as e:
                 return JSONResponse(status_code=e.status_code, content=e.detail)
+            except Exception as e:
+                return JSONResponse(status_code=500, content="Internal server error")
         return await call_next(request)
 
     def _require_auth(self, path: str):

src/services/_session_service.py

@@ -35,4 +35,6 @@ class SessionService:
 
     async def is_session_expired(self, token: str):
         session = await self.get_session_by_token(token)
+        if not session:
+            return True
         return session.expired_at < datetime.now()