feat: drop outdated session (#14373)

#### PR Dependency Tree


* **PR #14373** 👈

This tree was auto-generated by
[Charcoal](https://github.com/danerwilliams/charcoal)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added client version tracking and validation to ensure application
compatibility across authentication flows and sessions.
* Enhanced OAuth authentication with improved version handling during
sign-in and refresh operations.

* **Bug Fixes**
* Improved payment callback URL handling with safer defaults for
redirect links.

* **Tests**
* Expanded test coverage for client version enforcement and session
management.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

packages/backend/server/src/__tests__/version.spec.ts

@@ -73,7 +73,7 @@ test('should passthrough if version check is not enabled', async t => {
   spy.restore();
 });
 
-test('should passthrough is version range is invalid', async t => {
+test('should enforce hard required version when version range is invalid', async t => {
   config.override({
     client: {
       versionControl: {
@@ -82,9 +82,17 @@ test('should passthrough is version range is invalid', async t => {
     },
   });
 
-  let res = await app.GET('/guarded/test').set('x-affine-version', 'invalid');
+  let res = await app.GET('/guarded/test').set('x-affine-version', '0.25.0');
 
   t.is(res.status, 200);
+
+  res = await app.GET('/guarded/test').set('x-affine-version', 'invalid');
+
+  t.is(res.status, 403);
+  t.is(
+    res.body.message,
+    'Unsupported client with version [invalid], required version is [>=0.25.0].'
+  );
 });
 
 test('should pass if client version is allowed', async t => {