Add a background access_token cleanup job

Author: pimterry

api/src/db/token-cleanup.ts

@@ -0,0 +1,31 @@
+import { sql } from 'kysely';
+import log from 'loglevel';
+
+import { db } from './database.ts';
+import { reportError } from '../errors.ts';
+
+const ONE_DAY = 1000 * 60 * 60 * 24;
+
+async function deleteExpiredTokens() {
+    try {
+        const result = await db.deleteFrom('access_tokens')
+            .where('expires_at', '<', sql<Date>`NOW() - INTERVAL '1 month'`)
+            .executeTakeFirst();
+
+        const deletedCount = Number(result.numDeletedRows);
+        if (deletedCount > 0) {
+            log.info(`Cleaned up ${deletedCount} expired access tokens`);
+        }
+    } catch (e: unknown) {
+        log.error('Failed to clean up expired access tokens');
+        reportError(e as Error);
+    }
+}
+
+export function startTokenCleanup() {
+    // Run once on startup, then daily
+    deleteExpiredTokens();
+
+    const interval = setInterval(deleteExpiredTokens, ONE_DAY);
+    interval.unref();
+}

api/src/server.ts

@@ -12,6 +12,7 @@ import { reportError } from './errors.ts';
 
 import { initializeDbConnection, testDbConnection, closeDatabase } from './db/database.ts';
 import { runMigrations } from './db/migrator.ts';
+import { startTokenCleanup } from './db/token-cleanup.ts';
 import { testEmailConnection } from './email/mailer.ts';
 
 const app = express();
@@ -168,6 +169,7 @@ apiRouter.get('/health', async (req, res) => {
 export async function startApiServer() {
     const db = await initializeDbConnection();
     await runMigrations(db);
+    startTokenCleanup();
 
     const server = app.listen(process.env.PORT ?? 4000, () => {
         log.info(`Server (version ${process.env.VERSION}) listening on port ${(server.address() as any).port}`);