@crowdin/app-project-module 2.8.0 → 2.9.1

package/out/storage/drizzle/index.d.ts

@@ -8,7 +8,7 @@ export declare class DrizzleStorage implements Storage {
     protected readonly schema: typeof POSTGRESQL_SCHEMA;
     protected readonly type: DB_TYPE;
     protected readonly migrationPromise: Promise<void>;
-    protected migrated: boolean;
+    private _delayedMigrationPromise;
     protected readonly config: Config | UnauthorizedConfig;
     constructor({ config, type, delayedMigration, }: {
         config: Config | UnauthorizedConfig;
@@ -16,6 +16,8 @@ export declare class DrizzleStorage implements Storage {
         delayedMigration?: boolean;
     });
     migrateDelayed(): Promise<void>;
+    private _cascadeDelete;
+    private _executeMigration;
     saveCrowdinCredentials(credentials: CrowdinCredentials): Promise<void>;
     updateCrowdinCredentials(credentials: CrowdinCredentials): Promise<void>;
     getCrowdinCredentials(id: string): Promise<CrowdinCredentials | undefined>;

package/out/storage/drizzle/index.js

@@ -31,7 +31,6 @@ class DrizzleStorage {
     // schema: typeof D1_SCHEMA;
     constructor({ config, type, delayedMigration, }) {
         var _a, _b, _c, _d, _e;
-        this.migrated = false;
         let db;
         if (type === 'd1') {
             db = (0, d1_1.initD1)(Object.assign(Object.assign({}, config.d1Config), { additionalSchema: (_a = config.customTables) === null || _a === void 0 ? void 0 : _a.schema }));
@@ -47,14 +46,14 @@ class DrizzleStorage {
                     directoryPath: config.migrateToPostgreFromSQLite ? config.dbFolder : undefined,
                     additionalMigrationFolder: (_c = config.customTables) === null || _c === void 0 ? void 0 : _c.migrationFolder,
                 });
-            this.migrated = true;
+            this._delayedMigrationPromise = Promise.resolve();
         }
         else {
             db = (0, sqlite_1.initSqlite)(config.dbFolder, (_d = config.customTables) === null || _d === void 0 ? void 0 : _d.schema);
             this.migrationPromise = delayedMigration
                 ? Promise.resolve()
                 : (0, sqlite_1.migrateSqlite)(db, (_e = config.customTables) === null || _e === void 0 ? void 0 : _e.migrationFolder);
-            this.migrated = true;
+            this._delayedMigrationPromise = Promise.resolve();
         }
         // using cast here to avoid ts errors, since all drivers should have the same methods, just different clients
         this.db = db;
@@ -64,26 +63,55 @@ class DrizzleStorage {
     }
     migrateDelayed() {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c;
-            if (!this.migrated) {
-                if (this.type === 'd1') {
-                    yield (0, d1_1.migrateD1)(this.db, (_a = this.config.customTables) === null || _a === void 0 ? void 0 : _a.d1Migrations);
-                }
-                else if (this.type === 'postgresql') {
-                    yield (0, postgresql_1.migratePostgreSQL)({
-                        db: this.db,
-                        name: this.config.name,
-                        directoryPath: this.config.migrateToPostgreFromSQLite ? this.config.dbFolder : undefined,
-                        additionalMigrationFolder: (_b = this.config.customTables) === null || _b === void 0 ? void 0 : _b.migrationFolder,
-                    });
-                }
-                else {
-                    yield (0, sqlite_1.migrateSqlite)(this.db, (_c = this.config.customTables) === null || _c === void 0 ? void 0 : _c.migrationFolder);
-                }
-                this.migrated = true;
+            if (!this._delayedMigrationPromise) {
+                this._delayedMigrationPromise = this._executeMigration();
+            }
+            return this._delayedMigrationPromise;
+        });
+    }
+    // Each backend needs a different atomic delete strategy:
+    // - better-sqlite3: synchronous transaction (async callbacks are not awaited by the driver)
+    // - D1: batch API (Workers runtime does not support BEGIN/COMMIT via the JS binding)
+    // - PostgreSQL: standard async transaction
+    _cascadeDelete(pairs) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (this.type === 'sqlite') {
+                this.db.transaction((tx) => {
+                    for (const { table, condition } of pairs) {
+                        tx.delete(table).where(condition).run();
+                    }
+                });
+            }
+            else if (this.type === 'd1') {
+                const d1Db = this.db;
+                yield d1Db.batch(pairs.map(({ table, condition }) => d1Db.delete(table).where(condition)));
+            }
+            else {
+                yield this.db.transaction((tx) => __awaiter(this, void 0, void 0, function* () {
+                    for (const { table, condition } of pairs) {
+                        yield tx.delete(table).where(condition);
+                    }
+                }));
             }
         });
     }
+    _executeMigration() {
+        var _a, _b, _c;
+        if (this.type === 'd1') {
+            return (0, d1_1.migrateD1)(this.db, (_a = this.config.customTables) === null || _a === void 0 ? void 0 : _a.d1Migrations);
+        }
+        else if (this.type === 'postgresql') {
+            return (0, postgresql_1.migratePostgreSQL)({
+                db: this.db,
+                name: this.config.name,
+                directoryPath: this.config.migrateToPostgreFromSQLite ? this.config.dbFolder : undefined,
+                additionalMigrationFolder: (_b = this.config.customTables) === null || _b === void 0 ? void 0 : _b.migrationFolder,
+            });
+        }
+        else {
+            return (0, sqlite_1.migrateSqlite)(this.db, (_c = this.config.customTables) === null || _c === void 0 ? void 0 : _c.migrationFolder);
+        }
+    }
     saveCrowdinCredentials(credentials) {
         return __awaiter(this, void 0, void 0, function* () {
             yield this.migrationPromise;
@@ -168,22 +196,23 @@ class DrizzleStorage {
     deleteCrowdinCredentials(id) {
         return __awaiter(this, void 0, void 0, function* () {
             yield this.migrationPromise;
-            yield this.db.delete(this.schema.crowdinCredentials).where((0, drizzle_orm_1.eq)(this.schema.crowdinCredentials.id, id));
-            yield this.db
-                .delete(this.schema.integrationCredentials)
-                .where((0, drizzle_orm_1.eq)(this.schema.integrationCredentials.crowdin_id, id));
-            yield this.db.delete(this.schema.syncSettings).where((0, drizzle_orm_1.eq)(this.schema.syncSettings.crowdin_id, id));
-            yield this.db.delete(this.schema.appMetadata).where((0, drizzle_orm_1.eq)(this.schema.appMetadata.crowdin_id, id));
-            yield this.db.delete(this.schema.filesSnapshot).where((0, drizzle_orm_1.eq)(this.schema.filesSnapshot.crowdin_id, id));
-            yield this.db.delete(this.schema.webhooks).where((0, drizzle_orm_1.eq)(this.schema.webhooks.crowdin_id, id));
-            yield this.db.delete(this.schema.userErrors).where((0, drizzle_orm_1.eq)(this.schema.userErrors.crowdin_id, id));
-            yield this.db.delete(this.schema.integrationSettings).where((0, drizzle_orm_1.eq)(this.schema.integrationSettings.crowdin_id, id));
-            yield this.db.delete(this.schema.job).where((0, drizzle_orm_1.eq)(this.schema.job.crowdin_id, id));
-            yield this.db
-                .delete(this.schema.translationFileCache)
-                .where((0, drizzle_orm_1.eq)(this.schema.translationFileCache.crowdin_id, id));
-            yield this.db.delete(this.schema.unsyncedFiles).where((0, drizzle_orm_1.eq)(this.schema.unsyncedFiles.crowdin_id, id));
-            yield this.db.delete(this.schema.syncedData).where((0, drizzle_orm_1.eq)(this.schema.syncedData.crowdin_id, id));
+            yield this._cascadeDelete([
+                { table: this.schema.crowdinCredentials, condition: (0, drizzle_orm_1.eq)(this.schema.crowdinCredentials.id, id) },
+                {
+                    table: this.schema.integrationCredentials,
+                    condition: (0, drizzle_orm_1.eq)(this.schema.integrationCredentials.crowdin_id, id),
+                },
+                { table: this.schema.syncSettings, condition: (0, drizzle_orm_1.eq)(this.schema.syncSettings.crowdin_id, id) },
+                { table: this.schema.appMetadata, condition: (0, drizzle_orm_1.eq)(this.schema.appMetadata.crowdin_id, id) },
+                { table: this.schema.filesSnapshot, condition: (0, drizzle_orm_1.eq)(this.schema.filesSnapshot.crowdin_id, id) },
+                { table: this.schema.webhooks, condition: (0, drizzle_orm_1.eq)(this.schema.webhooks.crowdin_id, id) },
+                { table: this.schema.userErrors, condition: (0, drizzle_orm_1.eq)(this.schema.userErrors.crowdin_id, id) },
+                { table: this.schema.integrationSettings, condition: (0, drizzle_orm_1.eq)(this.schema.integrationSettings.crowdin_id, id) },
+                { table: this.schema.job, condition: (0, drizzle_orm_1.eq)(this.schema.job.crowdin_id, id) },
+                { table: this.schema.translationFileCache, condition: (0, drizzle_orm_1.eq)(this.schema.translationFileCache.crowdin_id, id) },
+                { table: this.schema.unsyncedFiles, condition: (0, drizzle_orm_1.eq)(this.schema.unsyncedFiles.crowdin_id, id) },
+                { table: this.schema.syncedData, condition: (0, drizzle_orm_1.eq)(this.schema.syncedData.crowdin_id, id) },
+            ]);
         });
     }
     saveIntegrationCredentials(id, credentials, crowdinId) {
@@ -248,41 +277,50 @@ class DrizzleStorage {
     deleteIntegrationCredentials(id) {
         return __awaiter(this, void 0, void 0, function* () {
             yield this.migrationPromise;
-            yield this.db.delete(this.schema.integrationCredentials).where((0, drizzle_orm_1.eq)(this.schema.integrationCredentials.id, id));
-            yield this.db.delete(this.schema.syncSettings).where((0, drizzle_orm_1.eq)(this.schema.syncSettings.integration_id, id));
-            yield this.db.delete(this.schema.filesSnapshot).where((0, drizzle_orm_1.eq)(this.schema.filesSnapshot.integration_id, id));
-            yield this.db.delete(this.schema.webhooks).where((0, drizzle_orm_1.eq)(this.schema.webhooks.integration_id, id));
-            yield this.db.delete(this.schema.userErrors).where((0, drizzle_orm_1.eq)(this.schema.userErrors.integration_id, id));
-            yield this.db
-                .delete(this.schema.integrationSettings)
-                .where((0, drizzle_orm_1.eq)(this.schema.integrationSettings.integration_id, id));
-            yield this.db.delete(this.schema.job).where((0, drizzle_orm_1.eq)(this.schema.job.integration_id, id));
-            yield this.db
-                .delete(this.schema.translationFileCache)
-                .where((0, drizzle_orm_1.eq)(this.schema.translationFileCache.integration_id, id));
-            yield this.db.delete(this.schema.unsyncedFiles).where((0, drizzle_orm_1.eq)(this.schema.unsyncedFiles.integration_id, id));
-            yield this.db.delete(this.schema.syncedData).where((0, drizzle_orm_1.eq)(this.schema.syncedData.integration_id, id));
+            yield this._cascadeDelete([
+                { table: this.schema.integrationCredentials, condition: (0, drizzle_orm_1.eq)(this.schema.integrationCredentials.id, id) },
+                { table: this.schema.syncSettings, condition: (0, drizzle_orm_1.eq)(this.schema.syncSettings.integration_id, id) },
+                { table: this.schema.filesSnapshot, condition: (0, drizzle_orm_1.eq)(this.schema.filesSnapshot.integration_id, id) },
+                { table: this.schema.webhooks, condition: (0, drizzle_orm_1.eq)(this.schema.webhooks.integration_id, id) },
+                { table: this.schema.userErrors, condition: (0, drizzle_orm_1.eq)(this.schema.userErrors.integration_id, id) },
+                {
+                    table: this.schema.integrationSettings,
+                    condition: (0, drizzle_orm_1.eq)(this.schema.integrationSettings.integration_id, id),
+                },
+                { table: this.schema.job, condition: (0, drizzle_orm_1.eq)(this.schema.job.integration_id, id) },
+                {
+                    table: this.schema.translationFileCache,
+                    condition: (0, drizzle_orm_1.eq)(this.schema.translationFileCache.integration_id, id),
+                },
+                { table: this.schema.unsyncedFiles, condition: (0, drizzle_orm_1.eq)(this.schema.unsyncedFiles.integration_id, id) },
+                { table: this.schema.syncedData, condition: (0, drizzle_orm_1.eq)(this.schema.syncedData.integration_id, id) },
+            ]);
         });
     }
     deleteAllIntegrationCredentials(crowdinId) {
         return __awaiter(this, void 0, void 0, function* () {
             yield this.migrationPromise;
-            yield this.db
-                .delete(this.schema.integrationCredentials)
-                .where((0, drizzle_orm_1.eq)(this.schema.integrationCredentials.crowdin_id, crowdinId));
-            yield this.db.delete(this.schema.syncSettings).where((0, drizzle_orm_1.eq)(this.schema.syncSettings.crowdin_id, crowdinId));
-            yield this.db.delete(this.schema.filesSnapshot).where((0, drizzle_orm_1.eq)(this.schema.filesSnapshot.crowdin_id, crowdinId));
-            yield this.db.delete(this.schema.webhooks).where((0, drizzle_orm_1.eq)(this.schema.webhooks.crowdin_id, crowdinId));
-            yield this.db.delete(this.schema.userErrors).where((0, drizzle_orm_1.eq)(this.schema.userErrors.crowdin_id, crowdinId));
-            yield this.db
-                .delete(this.schema.integrationSettings)
-                .where((0, drizzle_orm_1.eq)(this.schema.integrationSettings.crowdin_id, crowdinId));
-            yield this.db.delete(this.schema.job).where((0, drizzle_orm_1.eq)(this.schema.job.crowdin_id, crowdinId));
-            yield this.db
-                .delete(this.schema.translationFileCache)
-                .where((0, drizzle_orm_1.eq)(this.schema.translationFileCache.crowdin_id, crowdinId));
-            yield this.db.delete(this.schema.unsyncedFiles).where((0, drizzle_orm_1.eq)(this.schema.unsyncedFiles.crowdin_id, crowdinId));
-            yield this.db.delete(this.schema.syncedData).where((0, drizzle_orm_1.eq)(this.schema.syncedData.crowdin_id, crowdinId));
+            yield this._cascadeDelete([
+                {
+                    table: this.schema.integrationCredentials,
+                    condition: (0, drizzle_orm_1.eq)(this.schema.integrationCredentials.crowdin_id, crowdinId),
+                },
+                { table: this.schema.syncSettings, condition: (0, drizzle_orm_1.eq)(this.schema.syncSettings.crowdin_id, crowdinId) },
+                { table: this.schema.filesSnapshot, condition: (0, drizzle_orm_1.eq)(this.schema.filesSnapshot.crowdin_id, crowdinId) },
+                { table: this.schema.webhooks, condition: (0, drizzle_orm_1.eq)(this.schema.webhooks.crowdin_id, crowdinId) },
+                { table: this.schema.userErrors, condition: (0, drizzle_orm_1.eq)(this.schema.userErrors.crowdin_id, crowdinId) },
+                {
+                    table: this.schema.integrationSettings,
+                    condition: (0, drizzle_orm_1.eq)(this.schema.integrationSettings.crowdin_id, crowdinId),
+                },
+                { table: this.schema.job, condition: (0, drizzle_orm_1.eq)(this.schema.job.crowdin_id, crowdinId) },
+                {
+                    table: this.schema.translationFileCache,
+                    condition: (0, drizzle_orm_1.eq)(this.schema.translationFileCache.crowdin_id, crowdinId),
+                },
+                { table: this.schema.unsyncedFiles, condition: (0, drizzle_orm_1.eq)(this.schema.unsyncedFiles.crowdin_id, crowdinId) },
+                { table: this.schema.syncedData, condition: (0, drizzle_orm_1.eq)(this.schema.syncedData.crowdin_id, crowdinId) },
+            ]);
         });
     }
     saveMetadata(id, metadata, crowdinId) {

package/out/util/connection.js

@@ -302,13 +302,16 @@ function prepareIntegrationCredentials(config, integration, integrationCredentia
             const performRefreshTokenRequest = (oauthLogin === null || oauthLogin === void 0 ? void 0 : oauthLogin.performRefreshTokenRequest) || (integrationLogin === null || integrationLogin === void 0 ? void 0 : integrationLogin.performRefreshTokenRequest);
             credentials.tokenProvider = {
                 getToken: (...args_1) => __awaiter(this, [...args_1], void 0, function* (force = false) {
-                    var _a, _b, _c, _d;
                     const { expireIn } = credentials;
                     //2 min as an extra buffer
                     const isExpired = !expireIn || expireIn - 120 < Date.now() / 1000;
                     if (!force && !isExpired) {
                         return credentials.accessToken;
                     }
+                    const existingRefresh = _integrationRefreshInFlight.get(integrationCredentials.id);
+                    if (existingRefresh) {
+                        return existingRefresh;
+                    }
                     (0, logger_1.log)(force
                         ? 'Force refreshing integration credentials'
                         : 'Integration credentials have expired during operation. Requesting a new credentials');
@@ -334,50 +337,62 @@ function prepareIntegrationCredentials(config, integration, integrationCredentia
                         }
                         return null;
                     });
-                    let newCredentials;
-                    try {
-                        newCredentials = yield doRefresh(credentials);
-                    }
-                    catch (e) {
-                        // In-memory refresh token may be stale (rotated by another process/worker,
-                        // or the token itself expired). Try fetching fresh credentials from DB.
-                        (0, logger_1.log)('Token refresh failed. Attempting to fetch fresh credentials from the database');
-                        const freshStoredCredentials = yield (0, storage_1.getStorage)().getIntegrationCredentials(integrationCredentials.id);
-                        if (freshStoredCredentials) {
-                            const freshCredentials = JSON.parse((0, _1.decryptData)(config, freshStoredCredentials.credentials));
-                            if (freshCredentials.refreshToken &&
-                                freshCredentials.refreshToken !== credentials.refreshToken) {
-                                (0, logger_1.log)('Found a newer refresh token in the database, retrying token refresh');
-                                try {
-                                    newCredentials = yield doRefresh(freshCredentials);
-                                    credentials.refreshToken = freshCredentials.refreshToken;
+                    const refreshPromise = (() => __awaiter(this, void 0, void 0, function* () {
+                        var _a, _b, _c, _d;
+                        let newCredentials;
+                        try {
+                            newCredentials = yield doRefresh(credentials);
+                        }
+                        catch (e) {
+                            // In-memory refresh token may be stale (rotated by another process/worker,
+                            // or the token itself expired). Try fetching fresh credentials from DB.
+                            (0, logger_1.log)('Token refresh failed. Attempting to fetch fresh credentials from the database');
+                            const freshStoredCredentials = yield (0, storage_1.getStorage)().getIntegrationCredentials(integrationCredentials.id);
+                            if (freshStoredCredentials) {
+                                const freshCredentials = JSON.parse((0, _1.decryptData)(config, freshStoredCredentials.credentials));
+                                if (freshCredentials.refreshToken &&
+                                    freshCredentials.refreshToken !== credentials.refreshToken) {
+                                    (0, logger_1.log)('Found a newer refresh token in the database, retrying token refresh');
+                                    try {
+                                        newCredentials = yield doRefresh(freshCredentials);
+                                        credentials.refreshToken = freshCredentials.refreshToken;
+                                    }
+                                    catch (retryError) {
+                                        (0, logger_1.logError)(retryError);
+                                        throw retryError;
+                                    }
                                 }
-                                catch (retryError) {
-                                    (0, logger_1.logError)(retryError);
-                                    throw retryError;
+                                else {
+                                    throw e;
                                 }
                             }
                             else {
                                 throw e;
                             }
                         }
-                        else {
-                            throw e;
+                        if (!newCredentials) {
+                            return credentials.accessToken;
                         }
-                    }
-                    if (!newCredentials) {
+                        credentials.accessToken = newCredentials[((_a = oauthLogin === null || oauthLogin === void 0 ? void 0 : oauthLogin.fieldsMapping) === null || _a === void 0 ? void 0 : _a.accessToken) || 'access_token'];
+                        credentials.expireIn =
+                            Number(newCredentials[((_b = oauthLogin === null || oauthLogin === void 0 ? void 0 : oauthLogin.fieldsMapping) === null || _b === void 0 ? void 0 : _b.expiresIn) || 'expires_in']) +
+                                Date.now() / 1000;
+                        if (newCredentials[((_c = oauthLogin === null || oauthLogin === void 0 ? void 0 : oauthLogin.fieldsMapping) === null || _c === void 0 ? void 0 : _c.refreshToken) || 'refresh_token']) {
+                            credentials.refreshToken =
+                                newCredentials[((_d = oauthLogin === null || oauthLogin === void 0 ? void 0 : oauthLogin.fieldsMapping) === null || _d === void 0 ? void 0 : _d.refreshToken) || 'refresh_token'];
+                        }
+                        (0, logger_1.log)('Saving updated integration credentials in the database');
+                        yield (0, storage_1.getStorage)().updateIntegrationCredentials(integrationCredentials.id, (0, _1.encryptData)(config, JSON.stringify(credentials)));
                         return credentials.accessToken;
+                    }))();
+                    if (_integrationRefreshInFlight.size < 1000) {
+                        _integrationRefreshInFlight.set(integrationCredentials.id, refreshPromise);
+                        refreshPromise.finally(() => _integrationRefreshInFlight.delete(integrationCredentials.id));
                     }
-                    credentials.accessToken = newCredentials[((_a = oauthLogin === null || oauthLogin === void 0 ? void 0 : oauthLogin.fieldsMapping) === null || _a === void 0 ? void 0 : _a.accessToken) || 'access_token'];
-                    credentials.expireIn =
-                        Number(newCredentials[((_b = oauthLogin === null || oauthLogin === void 0 ? void 0 : oauthLogin.fieldsMapping) === null || _b === void 0 ? void 0 : _b.expiresIn) || 'expires_in']) + Date.now() / 1000;
-                    if (newCredentials[((_c = oauthLogin === null || oauthLogin === void 0 ? void 0 : oauthLogin.fieldsMapping) === null || _c === void 0 ? void 0 : _c.refreshToken) || 'refresh_token']) {
-                        credentials.refreshToken =
-                            newCredentials[((_d = oauthLogin === null || oauthLogin === void 0 ? void 0 : oauthLogin.fieldsMapping) === null || _d === void 0 ? void 0 : _d.refreshToken) || 'refresh_token'];
+                    else {
+                        (0, logger_1.log)('Warning: _integrationRefreshInFlight map reached 1000 entries; skipping deduplication for this refresh');
                     }
-                    (0, logger_1.log)('Saving updated integration credentials in the database');
-                    yield (0, storage_1.getStorage)().updateIntegrationCredentials(integrationCredentials.id, (0, _1.encryptData)(config, JSON.stringify(credentials)));
-                    return credentials.accessToken;
+                    return refreshPromise;
                 }),
                 refreshToken: () => {
                     return credentials.tokenProvider.getToken(true);
@@ -389,30 +404,48 @@ function prepareIntegrationCredentials(config, integration, integrationCredentia
         return credentials;
     });
 }
+// This map is used to deduplicate concurrent refresh requests for the same Crowdin credentials.
+// Keyed by credentials.id. Assumes a given credentials.id is always used with the same config
+// (i.e. clientId/clientSecret are 1:1 with the credential). Concurrent callers with the same id
+// share one in-flight refresh and all receive the same result.
+const _crowdinRefreshInFlight = new Map();
+const _integrationRefreshInFlight = new Map();
 function refreshCrowdinCreds(_a) {
     return __awaiter(this, arguments, void 0, function* ({ config, credentials }) {
-        (0, logger_1.log)('Crowdin credentials have expired. Requesting a new credentials');
-        const newCredentials = yield refreshToken(config, credentials);
-        (0, logger_1.log)('Saving updated crowdin credentials in the database');
-        const newCrowdinCredentials = {
-            id: credentials.id,
-            appSecret: credentials.appSecret,
-            domain: credentials.domain,
-            userId: credentials.userId,
-            agentId: credentials.agentId,
-            organizationId: credentials.organizationId,
-            baseUrl: credentials.baseUrl,
-            refreshToken: newCredentials.refreshToken,
-            accessToken: newCredentials.accessToken,
-            expire: (new Date().getTime() / 1000 + newCredentials.expiresIn).toString(),
-            type: credentials.type,
-        };
-        yield (0, storage_1.getStorage)().updateCrowdinCredentials(newCrowdinCredentials);
-        const token = (0, _1.decryptData)(config, newCredentials.accessToken);
-        return {
-            credentials: newCrowdinCredentials,
-            token,
-        };
+        const existing = _crowdinRefreshInFlight.get(credentials.id);
+        if (existing) {
+            return existing;
+        }
+        const connectionPromise = (() => __awaiter(this, void 0, void 0, function* () {
+            (0, logger_1.log)('Crowdin credentials have expired. Requesting new credentials');
+            const newCredentials = yield refreshToken(config, credentials);
+            (0, logger_1.log)('Saving updated crowdin credentials in the database');
+            const newCrowdinCredentials = {
+                id: credentials.id,
+                appSecret: credentials.appSecret,
+                domain: credentials.domain,
+                userId: credentials.userId,
+                agentId: credentials.agentId,
+                organizationId: credentials.organizationId,
+                baseUrl: credentials.baseUrl,
+                refreshToken: newCredentials.refreshToken,
+                accessToken: newCredentials.accessToken,
+                expire: (Date.now() / 1000 + newCredentials.expiresIn).toString(),
+                type: credentials.type,
+            };
+            yield (0, storage_1.getStorage)().updateCrowdinCredentials(newCrowdinCredentials);
+            const token = (0, _1.decryptData)(config, newCredentials.accessToken);
+            return { credentials: newCrowdinCredentials, token };
+        }))();
+        if (_crowdinRefreshInFlight.size < 1000) {
+            _crowdinRefreshInFlight.set(credentials.id, connectionPromise);
+            connectionPromise.finally(() => _crowdinRefreshInFlight.delete(credentials.id));
+        }
+        else {
+            // should not really happen, but just in case, we don't want to block the refresh if the map is too big
+            (0, logger_1.log)('Warning: _crowdinRefreshInFlight map reached 1000 entries; skipping deduplication for this refresh');
+        }
+        return connectionPromise;
     });
 }
 function refreshToken(config, credentials) {

package/out/util/index.d.ts

@@ -32,4 +32,5 @@ export declare function getFormattedDate({ date, userTimezone }: {
 }): string;
 export declare function kebabCase(str?: string): string;
 export declare function snakeCase(str?: string): string;
+export declare function getEnvInt(name: string, defaultValue: number): number;
 export declare function uniqBy<T>(array: any, key: keyof T): T[];

package/out/util/index.js

@@ -61,6 +61,7 @@ exports.validateEmail = validateEmail;
 exports.getFormattedDate = getFormattedDate;
 exports.kebabCase = kebabCase;
 exports.snakeCase = snakeCase;
+exports.getEnvInt = getEnvInt;
 exports.uniqBy = uniqBy;
 const crypto = __importStar(require("crypto"));
 const storage_1 = require("../storage");
@@ -345,6 +346,11 @@ function kebabCase(str) {
 function snakeCase(str) {
     return kebabCase(str).replace(/-/g, '_');
 }
+function getEnvInt(name, defaultValue) {
+    var _a;
+    const parsed = Number.parseInt((_a = process.env[name]) !== null && _a !== void 0 ? _a : '', 10);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : defaultValue;
+}
 function uniqBy(array, key) {
     if (!Array.isArray(array)) {
         return [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crowdin/app-project-module",
-  "version": "2.8.0",
+  "version": "2.9.1",
   "description": "Module that generates for you all common endpoints for serving standalone Crowdin App",
   "main": "out/index.js",
   "types": "out/index.d.ts",