Implement Session Expiry Auto-Cleanup in PostgreSQL Sessions Table
- Category: Backend: Web3 Auth & Stellar Signatures
- Task ID: BE-W3A-114
Description
This issue is dedicated to the technical design, implementation, and rigorous auditing of 'Implement Session Expiry Auto-Cleanup in PostgreSQL Sessions Table' inside the Lance marketplace ecosystem, specifically focusing on the Backend: Web3 Auth & Stellar Signatures component. You must design optimized database schemas, create proper query indexes, and configure efficient transaction isolation levels. Special attention should be paid to connection pooling health, preventing table scans, and ensuring query execution plans are fully optimized under high concurrency. Ensure that your implementation strictly adheres to the project's architectural guidelines, features self-documenting code with comprehensive inline annotations, and provides solid verification proofs. Any modifications to state variables must undergo strict validation before commits.
Requirements
- Implement signature validation and session routing inside
backend/src/routes/auth.rs for Implement Session Expiry Auto-Cleanup in PostgreSQL Sessions Table.
- Decode and validate Stellar public addresses securely, checking checksum bytes using dynamic decoders.
- Integrate Redis client helpers or secure cookies parameters inside the Axum route state.
- Write comprehensive test mockups to verify signature validations and challenge timelines.
Acceptance Criteria
- Login succeeds with Freighter wallet signatures that conform to SEP-53 standard.
- Incorrect signatures or expired challenges are rejected with a strict 401 Unauthorized status.
- Redis blacklist lookups execute within 1ms and effectively block revoked sessions.
Implement Session Expiry Auto-Cleanup in PostgreSQL Sessions Table
Description
This issue is dedicated to the technical design, implementation, and rigorous auditing of 'Implement Session Expiry Auto-Cleanup in PostgreSQL Sessions Table' inside the Lance marketplace ecosystem, specifically focusing on the Backend: Web3 Auth & Stellar Signatures component. You must design optimized database schemas, create proper query indexes, and configure efficient transaction isolation levels. Special attention should be paid to connection pooling health, preventing table scans, and ensuring query execution plans are fully optimized under high concurrency. Ensure that your implementation strictly adheres to the project's architectural guidelines, features self-documenting code with comprehensive inline annotations, and provides solid verification proofs. Any modifications to state variables must undergo strict validation before commits.
Requirements
backend/src/routes/auth.rsfor Implement Session Expiry Auto-Cleanup in PostgreSQL Sessions Table.Acceptance Criteria