Files
OmniRoute/open-sse/utils/kimiJwt.ts
Reza Rezaei 6efb01a957 feat(sse): add kimi web token lifecycle manager, rolling auto-refresh and 401 recovery (#10944)
Validado no worktree combinado: typecheck:core, changelog-integrity, complexity, cognitive-complexity, file-size, lint e 52 testes focados (kimi-jwt, kimi-credentials-extract, kimi-token-refresh, kimi-web-401-retry, provider-refresh-token-route, token-health-check-kimi) todos verdes. Implementação sólida e bem testada de ciclo de vida de token para Kimi Web. CI vermelho é o base-red já rastreado em #9985. Obrigado!
2026-08-21 04:25:56 -03:00

52 lines
1.4 KiB
TypeScript

export interface KimiJwtPayload {
sub?: string;
iss?: string;
aud?: string[];
exp?: number;
iat?: number;
region?: string;
space_id?: string;
typ?: string;
membership?: { level?: number };
[key: string]: unknown;
}
export function parseKimiJwt(token: string): KimiJwtPayload | null {
if (!token || typeof token !== "string") return null;
const parts = token.trim().split(".");
if (parts.length !== 3) return null;
try {
const payloadJson = Buffer.from(parts[1], "base64url").toString("utf8");
const payload = JSON.parse(payloadJson);
if (typeof payload !== "object" || payload === null) return null;
return payload as KimiJwtPayload;
} catch {
return null;
}
}
export function getKimiTokenExpiration(token: string): {
expiresAtSec: number;
issuedAtSec: number;
remainingSec: number;
isExpired: boolean;
} | null {
const payload = parseKimiJwt(token);
if (!payload || typeof payload.exp !== "number") return null;
const nowSec = Math.floor(Date.now() / 1000);
const remainingSec = payload.exp - nowSec;
return {
expiresAtSec: payload.exp,
issuedAtSec: typeof payload.iat === "number" ? payload.iat : 0,
remainingSec,
isExpired: remainingSec <= 0,
};
}
export function isKimiTokenExpiringSoon(token: string, thresholdSec = 240): boolean {
const exp = getKimiTokenExpiration(token);
if (!exp) return false;
return exp.remainingSec <= thresholdSec;
}