⚡️ codeCacheへのRaceCondition対策

pkg/token/issuer.go

@@ -7,6 +7,7 @@ import (
 	"fmt"
 	"google.golang.org/appengine/v2/log"
 	"strconv"
+	"sync"
 	"time"
 	"ynufes-mypage-backend/pkg/jwt"
 )
@@ -16,23 +17,26 @@ type Issuer struct {
 	issuer    string
 	maxAge    time.Duration
 	codeCache map[string]credit
+	lock      sync.RWMutex // lock for codeCache, prevents race condition
 }
 
 type credit struct {
 	id   string
 	time int64
 }
 
-func NewTokenIssuer(jwtSecret string, issuer string, maxAge time.Duration) Issuer {
-	return Issuer{
+func NewTokenIssuer(jwtSecret string, issuer string, maxAge time.Duration) *Issuer {
+	return &Issuer{
 		jwtSecret: jwtSecret,
 		issuer:    issuer,
 		maxAge:    maxAge,
 		codeCache: make(map[string]credit),
 	}
 }
 
-func (v Issuer) IssueNewCode(id string) (string, error) {
+func (v *Issuer) IssueNewCode(id string) (string, error) {
+	v.lock.Lock()
+	defer v.lock.Unlock()
 	cnt := 0
 	newCode, err := v.generateSecret()
 	if err != nil {
@@ -53,6 +57,8 @@ func (v Issuer) IssueNewCode(id string) (string, error) {
 }
 
 func (v Issuer) IssueToken(code string) (string, error) {
+	v.lock.Lock()
+	defer v.lock.Unlock()
 	credit, ok := v.codeCache[code]
 	if !ok {
 		return "", fmt.Errorf("code not found")
@@ -72,6 +78,8 @@ func (v Issuer) IssueToken(code string) (string, error) {
 }
 
 func (v Issuer) RevokeOldCodes() {
+	v.lock.Lock()
+	defer v.lock.Unlock()
 	for s, t := range v.codeCache {
 		// If the code is older than 5 seconds, delete it
 		if time.Now().UnixMilli()-t.time > 5000 {