Method listSessions

src/node/services/serverAuthService.ts:500–538

(currentSessionId: string | null)

  }

  async listSessions(currentSessionId: string | null): Promise<ServerAuthSessionView[]> {
    await using _lock = await this.sessionsMutex.acquire();
    const data = await this.loadPersistedSessionsLocked();

    const now = Date.now();
    const unexpiredSessions = data.sessions.filter((session) => {
      const ageMs = now - session.createdAtMs;
      return (
        Number.isFinite(session.createdAtMs) &&
        Number.isFinite(ageMs) &&
        ageMs < SERVER_AUTH_SESSION_MAX_AGE_MS
      );
    });

    if (unexpiredSessions.length !== data.sessions.length) {
      const removedCount = data.sessions.length - unexpiredSessions.length;
      data.sessions = unexpiredSessions;

      try {
        await this.savePersistedSessionsLocked(data);
      } catch (error) {
        // Listing sessions should remain available even if cleanup persistence fails.
        log.warn("Failed to persist expired server auth session cleanup", {
          removedCount,
          error: getErrorMessage(error),
        });
      }
    }

    return unexpiredSessions
      .map((session) => ({
        id: session.id,
        label: session.label ?? buildSessionLabel(session.userAgent),
        createdAtMs: session.createdAtMs,
        lastUsedAtMs: session.lastUsedAtMs,
        isCurrent: currentSessionId != null && currentSessionId === session.id,
      }))
      .sort((a, b) => b.lastUsedAtMs - a.lastUsedAtMs);
  }

  async revokeSession(sessionId: string): Promise<boolean> {
    const normalizedSessionId = normalizeOptionalString(sessionId);