Cleanup sessions at login

server/handler/signin.go

@@ -81,6 +81,11 @@ func (h *Handler) Authenticate(w http.ResponseWriter, r *http.Request) {
 		SameSite: http.SameSiteStrictMode,
 	})
 
+	err = h.Database.Queries().DeleteOldUserSessions(r.Context(), user.ID)
+	if err != nil {
+		h.Logger.Warn("failed to delete old user sessions", "userID", user.ID, "error", err)
+	}
+
 	w.Header().Set("HX-Redirect", "/")
 }
 

server/middleware/auth.go

@@ -1,7 +1,6 @@
 package middleware
 
 import (
-	"context"
 	"database/sql"
 	"log/slog"
 	"net/http"
@@ -76,17 +75,8 @@ func (m *AuthMiddleware) Middleware(next http.Handler) http.Handler {
 			}
 		}
 
-		m.cleanupUserSessions(context.Background(), session.UserID)
-
 		r.Header.Set("USER-ID", strconv.FormatInt(session.UserID, 10))
 
 		next.ServeHTTP(w, r)
 	})
 }
-
-func (m *AuthMiddleware) cleanupUserSessions(ctx context.Context, userID int64) {
-	err := m.Database.Queries().DeleteOldUserSessions(ctx, userID)
-	if err != nil {
-		m.Logger.Warn("failed to delete old user sessions", "userID", userID, "error", err)
-	}
-}