@flowfuse/nr-launcher 3.1.2-e164c60-202610081414.0 → 3.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,3 +1,13 @@
1
+ #### 3.2.0: Release
2
+
3
+ - chore: bump @flowfuse/nr-assistant to ^0.21.0 (#643)
4
+ - Recheck accepted HTTP bearer tokens after 60 seconds instead of 5 minutes (#642)
5
+ - Bump actions/create-github-app-token from 3.2.0 to 3.3.0 (#639)
6
+ - Bump actions/setup-node from 7.0.0 to 7.1.0 (#640)
7
+ - Bump @modelcontextprotocol/sdk from 1.29.0 to 1.32.1 (#638)
8
+ - Bump source-map-js from 1.2.1 to 1.2.2 (#637)
9
+ - Bump proxy-addr from 2.0.7 to 2.0.8 (#636)
10
+
1
11
  #### 3.1.1: Release
2
12
 
3
13
  - fix: Refuse deleting the file store root and sibling paths that share its prefix (#634)
@@ -10,6 +10,9 @@ let passport
10
10
  let httpNodeApp
11
11
  let client
12
12
  const httpTokenCache = {}
13
+ // How long an accepted bearer token is trusted before it is checked with the platform again,
14
+ // which is also how long a deleted or expired token can keep working
15
+ const HTTP_TOKEN_CACHE_SECONDS = 60
13
16
 
14
17
  function deriveSessionSecret (credentialSecret) {
15
18
  return credentialSecret
@@ -32,7 +35,7 @@ module.exports = {
32
35
  const cacheHit = httpTokenCache[token]
33
36
  if (cacheHit) {
34
37
  const age = (Date.now() - cacheHit.age) / 1000
35
- if (age < 300) {
38
+ if (age < HTTP_TOKEN_CACHE_SECONDS) {
36
39
  next()
37
40
  return
38
41
  }