Method FlushInactiveLoginConsentRequests

persistence/sql/persister_consent.go:531–583

(ctx context.Context, notAfter time.Time, limit, batchSize int)

}

func (p *Persister) FlushInactiveLoginConsentRequests(ctx context.Context, notAfter time.Time, limit, batchSize int) (err error) {
	ctx, span := p.r.Tracer(ctx).Tracer().Start(ctx, "persistence.sql.FlushInactiveLoginConsentRequests")
	defer otelx.End(span, &err)

	// The value of notAfter should be the minimum between input parameter and request max expire based on its configured age
	requestMaxExpire := time.Now().Add(-p.r.Config().ConsentRequestMaxAge(ctx))
	if requestMaxExpire.Before(notAfter) {
		notAfter = requestMaxExpire
	}

	challenges := make([]string, 0, limit)
	// Select up to [limit] flows that can be safely deleted, i.e. flows that meet
	// the following criteria:
	// - flow.state is anything between FlowStateLoginInitialized and FlowStateConsentUnused (unhandled)
	// - flow.login_error has valid error (login rejected)
	// - flow.consent_error has valid error (consent rejected)
	// AND timed-out
	// - flow.requested_at < minimum of ttl.login_consent_request and notAfter
	q := p.Connection(ctx).RawQuery(`
		SELECT login_challenge
		FROM hydra_oauth2_flow
		WHERE (
			(state != ? AND state IS NOT NULL)
			OR (login_error IS NOT NULL AND login_error <> '{}' AND login_error <> '')
			OR (consent_error IS NOT NULL AND consent_error <> '{}' AND consent_error <> '')
		)
		AND requested_at < ?
		AND nid = ?
		ORDER BY login_challenge
		LIMIT ?`,
		flow.FlowStateConsentUsed, notAfter, p.NetworkID(ctx), limit)

	if err := q.All(&challenges); err != nil {
		return errors.WithStack(err)
	}

	// Delete in batch consent requests and their references in cascade
	for i := 0; i < len(challenges); i += batchSize {
		j := min(i+batchSize, len(challenges))

		q := p.Connection(ctx).RawQuery(
			"DELETE FROM hydra_oauth2_flow WHERE login_challenge in (?) AND nid = ?",
			challenges[i:j],
			p.NetworkID(ctx),
		)

		if err := q.Exec(); err != nil {
			return sqlcon.HandleError(err)
		}
	}

	return nil
}

func (p *Persister) mySQLConfirmLoginSession(ctx context.Context, session *flow.LoginSession) error {
	return p.Transaction(ctx, func(ctx context.Context, c *pop.Connection) error {