cleanup

server/src/lib/auth-sessions.ts

@@ -1,6 +1,7 @@
 import { prisma } from "./prisma.js";
 
 const SESSION_DURATION_MS = 12 * 60 * 60 * 1000;
+const SESSION_RETENTION_DAYS = 30;
 
 export interface AuthSessionContext {
   id: string;
@@ -12,6 +13,10 @@ export function getSessionExpiryDate(now = new Date()) {
   return new Date(now.getTime() + SESSION_DURATION_MS);
 }
 
+export function getSessionRetentionCutoff(now = new Date()) {
+  return new Date(now.getTime() - SESSION_RETENTION_DAYS * 24 * 60 * 60 * 1000);
+}
+
 export async function createAuthSession(input: { userId: string; ipAddress?: string | null; userAgent?: string | null }) {
   return prisma.authSession.create({
     data: {
@@ -69,3 +74,27 @@ export async function revokeAuthSession(sessionId: string, input: { revokedById?
     },
   });
 }
+
+export async function pruneOldAuthSessions() {
+  const cutoff = getSessionRetentionCutoff();
+
+  const result = await prisma.authSession.deleteMany({
+    where: {
+      OR: [
+        {
+          revokedAt: {
+            lt: cutoff,
+          },
+        },
+        {
+          revokedAt: null,
+          expiresAt: {
+            lt: cutoff,
+          },
+        },
+      ],
+    },
+  });
+
+  return result.count;
+}