[nspcc-dev#1133] services/session: remove expired tokens every epoch

Signed-off-by: Evgenii Stratonikov <evgeniy@nspcc.ru>
aprasolova · Mar 5, 2022 · 015cc45 · 015cc45
1 parent b729b6e
commit 015cc45
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 0 deletions.
diff --git a/cmd/neofs-node/session.go b/cmd/neofs-node/session.go
@@ -2,13 +2,18 @@ package main
 
 import (
 	sessionGRPC "github.com/nspcc-dev/neofs-api-go/v2/session/grpc"
+	"github.com/nspcc-dev/neofs-node/pkg/morph/event"
+	"github.com/nspcc-dev/neofs-node/pkg/morph/event/netmap"
 	sessionTransportGRPC "github.com/nspcc-dev/neofs-node/pkg/network/transport/session/grpc"
 	sessionSvc "github.com/nspcc-dev/neofs-node/pkg/services/session"
 	"github.com/nspcc-dev/neofs-node/pkg/services/session/storage"
 )
 
 func initSessionService(c *cfg) {
 	c.privateTokenStore = storage.New()
+	addNewEpochNotificationHandler(c, func(ev event.Event) {
+		c.privateTokenStore.RemoveOld(ev.(netmap.NewEpoch).EpochNumber())
+	})
 
 	server := sessionTransportGRPC.New(
 		sessionSvc.NewSignService(

diff --git a/pkg/services/session/storage/storage.go b/pkg/services/session/storage/storage.go
@@ -49,3 +49,15 @@ func (s *TokenStore) Get(ownerID *owner.ID, tokenID []byte) *PrivateToken {
 
 	return t
 }
+
+// RemoveOld removes all tokens expired since provided epoch.
+func (s *TokenStore) RemoveOld(epoch uint64) {
+	s.mtx.Lock()
+	defer s.mtx.Unlock()
+
+	for k, tok := range s.tokens {
+		if tok.ExpiredAt() <= epoch {
+			delete(s.tokens, k)
+		}
+	}
+}