refactor session state

authorize/authorize.go

@@ -6,7 +6,6 @@ import (
 	"context"
 	"fmt"
 	"slices"
-	"sync"
 	"time"
 
 	"github.com/rs/zerolog"
@@ -45,8 +44,7 @@ type Authorize struct {
 	tracerProvider oteltrace.TracerProvider
 	tracer         oteltrace.Tracer
 
-	activeStreamsMu sync.Mutex
-	activeStreams   []chan error
+	activeStreams ActiveStreams
 }
 
 // New validates and creates a new Authorize service from a set of config options.
@@ -59,7 +57,9 @@ func New(ctx context.Context, cfg *config.Config) (*Authorize, error) {
 		globalCache:    storage.NewGlobalCache(time.Minute),
 		tracerProvider: tracerProvider,
 		tracer:         tracer,
-		activeStreams:  []chan error{},
+		activeStreams: ActiveStreams{
+			streamsById: map[uint64]*StreamState{},
+		},
 	}
 	a.accessTracker = NewAccessTracker(a, accessTrackerMaxSize, accessTrackerDebouncePeriod)
 
@@ -167,15 +167,6 @@ func newPolicyEvaluator(
 
 // OnConfigChange updates internal structures based on config.Options
 func (a *Authorize) OnConfigChange(ctx context.Context, cfg *config.Config) {
-	a.activeStreamsMu.Lock()
-	// demo code
-	if cfg.Options.Routes[0].AllowAnyAuthenticatedUser == false {
-		for _, s := range a.activeStreams {
-			s <- fmt.Errorf("no longer authorized")
-		}
-		clear(a.activeStreams)
-	}
-	a.activeStreamsMu.Unlock()
 	currentState := a.state.Load()
 	a.currentConfig.Store(cfg)
 	if newState, err := newAuthorizeStateFromConfig(ctx, a.tracerProvider, cfg, a.store, currentState.evaluator); err != nil {