SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).

SuperTokens.com

how to expire session in passwordless login ?

See this section about revoking a session: https://supertokens.com/docs/session/common-customizations/sessions/revoke-session

how to expire an old session while new session was created ?

you can override the createNewSession function and call revoke session on all the sessions that belong to the user ID before calling the original implementation.