track and evaluate createdAt for identity

Author: cnuss

src/models/schemas/Identity.ts

@@ -17,6 +17,7 @@ import Joi from 'joi';
 
 export const metaSchema = Joi.object({
   name: Joi.string().required(),
+  createdAt: Joi.string().required(),
 }).label('IdentityMeta');
 
 export const identity = {

src/services/GithubService.ts

@@ -20,6 +20,7 @@ import { Identity } from '../models/interfaces';
 import crypto from 'crypto';
 import { IdentityModel } from '../models/IdentityModel';
 import { StateLockRequest } from '../models/interfaces/StateLockRequest';
+import moment from 'moment';
 // import seedrandom from 'seedrandom';
 
 export type IdentityWithToken = Identity & {
@@ -117,6 +118,7 @@ export class GithubService {
     workspace?: string,
     stateLockRequest?: StateLockRequest,
   ): Promise<Identity> => {
+    const now = moment();
     const tokenSha = crypto.createHash('sha256').update(auth).digest().toString('base64');
 
     console.log(
@@ -140,6 +142,16 @@ export class GithubService {
       return { ...storedIdentity.attrs, workspace: workspace || 'default' };
     }
 
+    if (
+      storedIdentity &&
+      !stateLockRequest &&
+      storedIdentity.attrs.meta.createdAt &&
+      moment(storedIdentity.attrs.meta.createdAt).add(1, 'hour').isAfter(now)
+    ) {
+      console.log(`Found previously known identity used within 1 hour (sha: ${tokenSha})`);
+      return { ...storedIdentity.attrs, workspace: workspace || 'default' };
+    }
+
     const octokit = new Octokit({ auth });
 
     // Server-to-server tokens from GH Actions are permitted on a single repository
@@ -176,6 +188,7 @@ export class GithubService {
         tokenSha,
         meta: {
           name,
+          createdAt: now.toISOString(),
         },
       };
     }
@@ -197,6 +210,7 @@ export class GithubService {
         tokenSha,
         meta: {
           name,
+          createdAt: now.toISOString(),
         },
       };
     }
@@ -218,6 +232,7 @@ export class GithubService {
         tokenSha,
         meta: {
           name,
+          createdAt: now.toISOString(),
         },
       };
     }