From 3230a288047b6dc644a33435598ca39ef9f8f989 Mon Sep 17 00:00:00 2001
From: Blake Ridgway <blake@blakeridgway.com>
Date: Sat, 28 Mar 2026 16:09:27 -0500
Subject: [PATCH] purge expired sessions and password reset tokens every 24
 hours

---
 main.go | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/main.go b/main.go
index 0234a66..96d637e 100644
--- a/main.go
+++ b/main.go
@@ -120,6 +120,24 @@ func main() {
 		}
 	}()
 
+	// Background job: purge expired sessions and password reset tokens every 24 hours.
+	go func() {
+		ticker := time.NewTicker(24 * time.Hour)
+		defer ticker.Stop()
+		for {
+			select {
+			case <-ticker.C:
+				if err := db.PurgeExpired(database); err != nil {
+					slog.Error("purge expired rows", "err", err)
+				} else {
+					slog.Info("purged expired sessions and reset tokens")
+				}
+			case <-ctx.Done():
+				return
+			}
+		}
+	}()
+
 	<-ctx.Done()
 	stop()
 	slog.Info("shutting down")