snapshot of https://github.com/mattermost/mattermost.git (master, 2026-09-16; blobs > 131072B omitted)

server/channels/app/expired_access_token_notify.go

@@ -0,0 +1,78 @@
+// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
+// See LICENSE.txt for license information.
+
+package app
+
+import (
+	"github.com/mattermost/mattermost/server/public/model"
+	"github.com/mattermost/mattermost/server/public/shared/i18n"
+	"github.com/mattermost/mattermost/server/public/shared/mlog"
+	"github.com/mattermost/mattermost/server/public/shared/request"
+)
+
+// NotifyExpiredAccessTokensDeleted DMs the owner of each expired personal
+// access token that the cleanup_expired_access_tokens job is about to delete.
+//
+// This is the at-expiry safety net that complements the pre-expiry warning
+// cascade (pat_expiry_notify): it fires from the cleanup job at the moment a
+// token is removed, so an owner whose fire-and-forget integration silently
+// swallowed the rejection error still learns their token stopped working.
+//
+// It is best-effort. It is invoked before the tokens are deleted so the
+// token→owner mapping is still available, and every failure is logged and
+// swallowed so it never blocks the cleanup. Bot-owned tokens and tokens owned
+// by deactivated users are skipped, matching pat_expiry_notify — GetExpiredBefore
+// returns those too because the cleanup job must still delete them.
+func (a *App) NotifyExpiredAccessTokensDeleted(rctx request.CTX, tokens []*model.UserAccessToken) {
+	if len(tokens) == 0 {
+		return
+	}
+
+	systemBot, appErr := a.GetSystemBot(rctx)
+	if appErr != nil {
+		rctx.Logger().Error("Failed to get system bot to notify expired personal access token owners", mlog.Err(appErr))
+		return
+	}
+
+	for _, token := range tokens {
+		user, appErr := a.GetUser(rctx, token.UserId)
+		if appErr != nil {
+			rctx.Logger().Warn("Failed to get user for expired personal access token notification",
+				mlog.String("user_id", token.UserId),
+				mlog.Err(appErr),
+			)
+			continue
+		}
+
+		// Skip bot accounts and deactivated users, matching pat_expiry_notify.
+		if user.IsBot || user.DeleteAt != 0 {
+			continue
+		}
+
+		channel, appErr := a.GetOrCreateDirectChannel(rctx, token.UserId, systemBot.UserId)
+		if appErr != nil {
+			rctx.Logger().Warn("Failed to get direct channel for expired personal access token notification",
+				mlog.String("user_id", token.UserId),
+				mlog.Err(appErr),
+			)
+			continue
+		}
+
+		T := i18n.GetUserTranslations(user.Locale)
+		post := &model.Post{
+			ChannelId: channel.Id,
+			Message: T("app.user_access_token.expired_deleted_notification", model.StringInterface{
+				"Description": token.Description,
+			}),
+			Type:   model.PostTypeDefault,
+			UserId: systemBot.UserId,
+		}
+
+		if _, _, appErr := a.CreatePost(rctx, post, channel, model.CreatePostFlags{SetOnline: true}); appErr != nil {
+			rctx.Logger().Warn("Failed to send expired personal access token notification",
+				mlog.String("user_id", token.UserId),
+				mlog.Err(appErr),
+			)
+		}
+	}
+}