Update Auth.js and solved some potential bugs.

[Ujjawal-Kantt]

Pull Request

• Report security issues confidentially.
• Any contribution is under this license.
• Link this pull request to an issue.

---

Issue

Closes: Issue #XXXX

---

Approach

This PR fixes memory leaks, improves session management, enhances security, and optimizes authentication logic in the Auth.js file.

Key Changes:

1. Fixed Memory Leak in throttle

   • Used a Map() to track session timeouts.
   • Cleared timeouts properly before setting new ones.

2. Improved Role Fetching Mechanism

   • Ensured this.userRoles updates correctly.
   • Avoided redundant database calls when fetching user roles.

3. Enhanced Session Token Management

   • Ensured missing sessionToken values are handled properly.
   • Added validation to check for expired session tokens before processing.

4. Optimized Security Checks & Error Handling

   • Improved error logging for better debugging.
   • Ensured expired or invalid session tokens are rejected early.

5. Updated renewSessionIfNeeded Logic

   • Reduced redundant session expiry updates.
   • Only updates session expiry when required, preventing unnecessary writes.

---

Tasks

• Fix memory leaks in session handling.
• Improve role-fetching logic.
• Enhance error handling and security checks.
• Add tests for updated authentication logic.
• Update documentation to reflect session management improvements.
• Add security check.
• Add new Parse Error codes to Parse JS SDK (No hard-coded error codes in Parse Server).

[parse-github-assistant]

Thanks for opening this pull request!

• ❌ Please link an issue that describes the reason for this pull request, otherwise your pull request will be closed. Make sure to write it as Closes: #123 in the PR description, so I can recognize it.