A user can reuse an expired session by controlling the x-workos-session header.
x-workos-session
Patched in https://github.com/workos/authkit-nextjs/releases/tag/v0.4.2