Refine admin workflows and team access

2026-06-26 18:09:29 +02:00
parent b7804e10ea
commit 8b69dfbafb
71 changed files with 5066 additions and 751 deletions
@@ -9,6 +9,9 @@ namespace Backend.Services;

 public sealed class UserSessionService(IUserSessionRepository userSessionRepository) : IUserSessionService
 {
+    private static readonly TimeSpan IdleSessionLifetime = TimeSpan.FromHours(12);
+    private static readonly TimeSpan AbsoluteSessionLifetime = TimeSpan.FromDays(30);
+
    public async Task<UserSession?> ResolveSessionAsync(HttpContext context, CancellationToken cancellationToken = default)
    {
        var token = ReadBearerToken(context);
@@ -23,7 +26,15 @@ public sealed class UserSessionService(IUserSessionRepository userSessionReposit
            return null;
        }

-        session.LastSeenAt = DateTimeOffset.UtcNow;
+        var now = DateTimeOffset.UtcNow;
+        if (IsExpired(session, now))
+        {
+            session.IsActive = false;
+            await userSessionRepository.SaveChangesAsync(cancellationToken);
+            return null;
+        }
+
+        session.LastSeenAt = now;
        await userSessionRepository.SaveChangesAsync(cancellationToken);
        context.SetCurrentSession(session);
        return session;
@@ -83,6 +94,10 @@ public sealed class UserSessionService(IUserSessionRepository userSessionReposit
            : null;
    }

+    private static bool IsExpired(UserSession session, DateTimeOffset now) =>
+        session.CreatedAt <= now.Subtract(AbsoluteSessionLifetime)
+        || session.LastSeenAt <= now.Subtract(IdleSessionLifetime);
+
    private async Task<UserSession> PersistAndReturnAsync(UserSession session, CancellationToken cancellationToken)
    {
        await userSessionRepository.SaveChangesAsync(cancellationToken);