feat(server): remove inactive sessions (#9121)

* feat(server): remove inactive sessions

* add rudimentary unit test

---------

Co-authored-by: Daniel Dietzler <mail@ddietzler.dev>

server/src/services/session.service.ts

@@ -1,8 +1,10 @@
 import { Inject, Injectable } from '@nestjs/common';
+import { DateTime } from 'luxon';
 import { AccessCore, Permission } from 'src/cores/access.core';
 import { AuthDto } from 'src/dtos/auth.dto';
 import { SessionResponseDto, mapSession } from 'src/dtos/session.dto';
 import { IAccessRepository } from 'src/interfaces/access.interface';
+import { JobStatus } from 'src/interfaces/job.interface';
 import { ILoggerRepository } from 'src/interfaces/logger.interface';
 import { ISessionRepository } from 'src/interfaces/session.interface';
 
@@ -19,6 +21,25 @@ export class SessionService {
     this.access = AccessCore.create(accessRepository);
   }
 
+  async handleCleanup() {
+    const sessions = await this.sessionRepository.search({
+      updatedBefore: DateTime.now().minus({ days: 90 }).toJSDate(),
+    });
+
+    if (sessions.length === 0) {
+      return JobStatus.SKIPPED;
+    }
+
+    for (const session of sessions) {
+      await this.sessionRepository.delete(session.id);
+      this.logger.verbose(`Deleted expired session token: ${session.deviceOS}/${session.deviceType}`);
+    }
+
+    this.logger.log(`Deleted ${sessions.length} expired session tokens`);
+
+    return JobStatus.SUCCESS;
+  }
+
   async getAll(auth: AuthDto): Promise<SessionResponseDto[]> {
     const sessions = await this.sessionRepository.getByUserId(auth.user.id);
     return sessions.map((session) => mapSession(session, auth.session?.id));