Fix session del (#650)

src/auth/validate.rs

@@ -84,8 +84,11 @@ where
 
             let user = user_item::User::get_id(session.user_id, executor, redis).await?;
 
-            let metadata = get_session_metadata(req).await?;
-            session_queue.add(session.id, metadata).await;
+            let rate_limit_ignore = dotenvy::var("RATE_LIMIT_IGNORE_KEY")?;
+            if !req.headers().get("x-ratelimit-key").and_then(|x| x.to_str().ok()).map(|x| x == rate_limit_ignore).unwrap_or(false) {
+                let metadata = get_session_metadata(req).await?;
+                session_queue.add(session.id, metadata).await;
+            }
 
             user
         }

src/queue/session.rs

@@ -65,7 +65,7 @@ impl SessionQueue {
                 "
                 SELECT id, session, user_id
                 FROM sessions
-                WHERE refresh_expires >= NOW()
+                WHERE refresh_expires <= NOW()
                 "
             )
             .fetch_many(&mut *transaction)