@lucaapp/service-utils 5.22.0 → 5.23.0

package/dist/lib/sessionRevocation/sessionRevocation.d.ts

@@ -1,7 +1,8 @@
-import { IsOperatorTokenRevokedParams, IsRevokedOperatorJwtParams, RevokeOperatorTokensParams } from './types';
+import { CheckRevocationRedisSafetyParams, IsOperatorTokenRevokedParams, IsRevokedOperatorJwtParams, RevokeOperatorTokensParams } from './types';
 export declare const OPERATOR_REVOCATION_KEY_PREFIX = "revoked:operator:";
 export declare const OPERATOR_REVOCATION_TTL_SECONDS: number;
 export declare const buildOperatorRevocationKey: (operatorUuid: string) => string;
 export declare const revokeOperatorTokens: ({ redis, logger, operatorUuid, }: RevokeOperatorTokensParams) => Promise<void>;
 export declare const isOperatorTokenRevoked: ({ redis, logger, operatorUuid, issuedAtSeconds, }: IsOperatorTokenRevokedParams) => Promise<boolean>;
 export declare const isRevokedOperatorJwt: ({ redis, logger, payload, operatorRole, }: IsRevokedOperatorJwtParams) => Promise<boolean>;
+export declare const checkRevocationRedisSafety: ({ redis, logger, }: CheckRevocationRedisSafetyParams) => Promise<void>;

package/dist/lib/sessionRevocation/sessionRevocation.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isRevokedOperatorJwt = exports.isOperatorTokenRevoked = exports.revokeOperatorTokens = exports.buildOperatorRevocationKey = exports.OPERATOR_REVOCATION_TTL_SECONDS = exports.OPERATOR_REVOCATION_KEY_PREFIX = void 0;
+exports.checkRevocationRedisSafety = exports.isRevokedOperatorJwt = exports.isOperatorTokenRevoked = exports.revokeOperatorTokens = exports.buildOperatorRevocationKey = exports.OPERATOR_REVOCATION_TTL_SECONDS = exports.OPERATOR_REVOCATION_KEY_PREFIX = void 0;
 exports.OPERATOR_REVOCATION_KEY_PREFIX = 'revoked:operator:';
 exports.OPERATOR_REVOCATION_TTL_SECONDS = 24 * 60 * 60;
 const REDIS_GET_TIMEOUT_MS = 50;
@@ -68,3 +68,25 @@ const isRevokedOperatorJwt = async ({ redis, logger, payload, operatorRole, }) =
     });
 };
 exports.isRevokedOperatorJwt = isRevokedOperatorJwt;
+const readMaxMemoryPolicy = (raw) => {
+    if (Array.isArray(raw) && raw.length >= 2 && typeof raw[1] === 'string') {
+        return raw[1];
+    }
+    return null;
+};
+const checkRevocationRedisSafety = async ({ redis, logger, }) => {
+    try {
+        const policy = readMaxMemoryPolicy(await redis.config('GET', 'maxmemory-policy'));
+        if (policy === null) {
+            logger.warn('could not read operator token revocation redis maxmemory-policy');
+            return;
+        }
+        if (policy !== 'noeviction') {
+            logger.error({ policy }, 'operator token revocation redis uses evicting maxmemory-policy');
+        }
+    }
+    catch (error) {
+        logger.warn(error, 'operator token revocation redis maxmemory-policy check unavailable');
+    }
+};
+exports.checkRevocationRedisSafety = checkRevocationRedisSafety;

package/dist/lib/sessionRevocation/types.d.ts

@@ -25,3 +25,10 @@ export interface IsRevokedOperatorJwtParams {
     payload: RevocableJwtPayload;
     operatorRole: string;
 }
+export interface MaxMemoryPolicyReader {
+    config(subcommand: 'GET', parameter: string): Promise<unknown>;
+}
+export interface CheckRevocationRedisSafetyParams {
+    redis: MaxMemoryPolicyReader;
+    logger: Pick<Logger, 'warn' | 'error'>;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lucaapp/service-utils",
-  "version": "5.22.0",
+  "version": "5.23.0",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": [