Merge pull request #3002 from coreos-inc/joseph.schorr/QUAY-822/gc-app-tokens

Add a worker to automatically GC expired app specific tokens
This commit is contained in:
josephschorr 2018-02-20 17:21:48 -05:00 committed by GitHub
commit d77aa9228f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
7 changed files with 77 additions and 5 deletions

View file

@ -64,11 +64,11 @@ def get_expiring_tokens(user, soon):
AppSpecificAuthToken.expiration > datetime.now()))
def gc_expired_tokens(user):
""" Deletes all expired tokens owned by the given user. """
def gc_expired_tokens(expiration_window):
""" Deletes all expired tokens outside of the expiration window. """
(AppSpecificAuthToken
.delete()
.where(AppSpecificAuthToken.user == user, AppSpecificAuthToken.expiration < datetime.now())
.where(AppSpecificAuthToken.expiration < (datetime.now() - expiration_window))
.execute())