Function handle_revoke_ssh_session

crates/openshell-server/src/grpc/sandbox.rs:1406–1447

(
    state: &Arc<ServerState>,
    request: Request<RevokeSshSessionRequest>,
)

}

pub(super) async fn handle_revoke_ssh_session(
    state: &Arc<ServerState>,
    request: Request<RevokeSshSessionRequest>,
) -> Result<Response<RevokeSshSessionResponse>, Status> {
    let token = request.into_inner().token;
    if token.is_empty() {
        return Err(Status::invalid_argument("token is required"));
    }

    let session = state
        .store
        .get_message::<SshSession>(&token)
        .await
        .map_err(|e| Status::internal(format!("fetch ssh session failed: {e}")))?;

    let Some(mut session) = session else {
        return Ok(Response::new(RevokeSshSessionResponse { revoked: false }));
    };

    let resource_version = session
        .metadata
        .as_ref()
        .map_or(0, |metadata| metadata.resource_version);

    session.revoked = true;

    // Use CAS to prevent lost updates from concurrent revocations
    state
        .store
        .put_if(
            SshSession::object_type(),
            session.object_id(),
            session.object_name(),
            &session.encode_to_vec(),
            None,
            WriteCondition::MatchResourceVersion(resource_version),
        )
        .await
        .map_err(|e| super::persistence_error_to_status(e, "revoke ssh session"))?;

    Ok(Response::new(RevokeSshSessionResponse { revoked: true }))
}

// ---------------------------------------------------------------------------
// Exec transport helpers