global update and global fix

apps/sso-core/src/domain/session.service.ts

@@ -4,6 +4,7 @@ import { SessionStatus } from '../generated/prisma/client';
 import { PrismaService } from '../infra/prisma.service';
 import { AuthService } from './auth.service';
 import { SettingsService } from './settings.service';
+import { isProtectedSystemAccount } from './system-account.util';
 
 export interface SessionState {
   id: string;
@@ -31,6 +32,14 @@ export class SessionService {
       return null;
     }
 
+    if (isProtectedSystemAccount(session.user)) {
+      await this.prisma.session.update({
+        where: { id: sessionId },
+        data: { status: SessionStatus.REVOKED }
+      });
+      return null;
+    }
+
     const pinEnabled = Boolean(session.user.pinCode?.isEnabled);
     let pinVerified = session.pinVerified;
     let status = session.status;