bug: fix metadata-token-service.ts

.eslintrc.json

@@ -50,6 +50,7 @@
     "import/no-extraneous-dependencies": ["error", {
       "devDependencies": true
     }],
-    "import/no-cycle": "off"
+    "import/no-cycle": "off",
+    "linebreak-style": "off"
   }
 }

.gitignore

@@ -1,3 +1,4 @@
 .idea
 node_modules
 dist
+coverage

config/jest.coverage.ts

@@ -0,0 +1,17 @@
+import * as path from 'path';
+import config from './jest';
+
+/*
+ * For a detailed explanation regarding each configuration property and type check, visit:
+ * https://jestjs.io/docs/configuration
+ */
+
+export default {
+    ...config,
+    collectCoverage: true,
+    collectCoverageFrom: [
+        '**/*.{js,ts}',
+        '!generated/**',
+    ],
+    coverageDirectory: '../coverage',
+};

package.json

@@ -23,6 +23,7 @@
   "homepage": "https://github.com/yandex-cloud/nodejs-sdk#readme",
   "dependencies": {
     "@grpc/grpc-js": "^1.6.12",
+    "abort-controller-x": "^0.4.1",
     "axios": "^0.24.0",
     "jsonwebtoken": "^9.0.0",
     "lodash": "^4.17.21",
@@ -31,7 +32,6 @@
     "luxon": "^2.2.0",
     "nice-grpc": "^1.0.6",
     "nice-grpc-client-middleware-deadline": "^1.0.6",
-    "abort-controller-x": "^0.4.1",
     "node-abort-controller": "^3.1.1",
     "protobufjs": "^7.2.4",
     "utility-types": "^3.10.0"
@@ -47,6 +47,7 @@
     "@types/node": "^16.11.3",
     "@typescript-eslint/eslint-plugin": "^5.7.0",
     "@typescript-eslint/parser": "^5.7.0",
+    "cross-env": "^7.0.3",
     "eslint": "^8.4.1",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-config-airbnb-typescript": "^16.1.0",
@@ -66,8 +67,9 @@
   },
   "scripts": {
     "test": "jest -c config/jest.ts --passWithNoTests",
+    "coverage": "jest -c config/jest.coverage.ts --passWithNoTests",
     "lint": "eslint src config",
-    "build": "NODE_OPTIONS=\"--max-old-space-size=4096\" tsc -p .",
+    "build": "cross-env NODE_OPTIONS=\"--max-old-space-size=4096\" tsc -p .",
     "generate-code": "ts-node scripts/generate-code.ts",
     "prepare": "husky install",
     "prepublishOnly": "npm run build"

src/token-service/metadata-token-service.consts.ts

@@ -0,0 +1,30 @@
+/*
+
+Issuance of tokens shall be in accordance with the following rules
+
+When accessing APIs of other Cloud services (including the database), services should follow the standard rules of
+working with tokens recommended by the documentation:
+
+- a token is issued in the way most appropriate for this service: for example, it can be a metadata service for SVM, Token Agent
+  for iron hosts or JWT for services hosted outside the Cloud perimeter
+
+- the application does not start (does not start accepting requests) until its system SA token has been successfully issued;
+  the application does not start if the token issued at the moment of start is valid for less than 15 minutes;
+
+- the token issued at start time is used for a time equal to at least 10% of the difference between expires_at and the time the token was issued;
+
+- a token that has been used within the time specified in the previous paragraph is subject to update: the application starts
+  a background process that reissues the token of its system SA, while all current requests continue to be made with the
+  cached token (thus, in case of any problems with token reissue, 90% of the token's lifetime will be left to notice and
+  correct the situation);
+
+- it is recommended that applications have a system SA token usage time monitor, which should be lit if the token lifetime
+  approaches 20% of the difference between expires_at and the token's expiration time.
+
+*/
+
+export const MAX_ATTEMPTS_NUMBER_TO_GET_TOKEN_IN_INITIALIZE = 5;
+
+export const TOKEN_MINIMUM_LIFETIME_MARGIN_MS = 15 * 60 * 1000;
+
+export const TOKEN_LIFETIME_LEFT_TO_REFRESH_PCT = 90;