DD-1685: Check for expired token

[jo-pol]

Fixes DD-1685: Check for expired token

Description of changes

How to test

See added unit tests. authenticate_should_return_401_for_expired_dataverse_key failed before the query was fixed.

PS: The tests create their own tables. This introduces a risk of false positives due to typos compared to the actual dvndb, or changes in the dvndb. So also tested after compilation and deploy with:

update apitoken set expiretime = (CURRENT_DATE - INTERVAL '1' DAY) where id=999;
curl -i -H "X-Dataverse-Key:xxx" -X POST http://localhost:20340

Use actual values for 999 and xxx and reset the expiretime after the test. Before the DB change, curl returns 200-OK, after the change 401-Unauthorized.

Related PRs

(Add links)
*

Notify

@DANS-KNAW/core-systems