Merge pull request #555 from LerianStudio/hotfix/idempotency-ttl

fix: reduce idempotency TTL from 24h to 30s

Author: arthurkz

.github/workflows/pr-security-scan.yml

@@ -27,7 +27,7 @@ on:
 
 jobs:
   security-scan:
-    uses: LerianStudio/github-actions-shared-workflows/.github/workflows/pr-security-scan.yml@v1.11.0
+    uses: LerianStudio/github-actions-shared-workflows/.github/workflows/pr-security-scan.yml@v1.13.1
     with:
       runner_type: "blacksmith-4vcpu-ubuntu-2404"
       filter_paths: |-

.trivyignore

@@ -8,4 +8,5 @@ CVE-2025-58186
 CVE-2025-58187
 CVE-2025-58188
 CVE-2025-61723
-CVE-2025-61724
+CVE-2025-61724
+CVE-2026-25882

components/manager/internal/services/create-report_test.go

@@ -9,7 +9,6 @@ import (
 	"encoding/json"
 	"errors"
 	"testing"
-	"time"
 
 	"github.com/LerianStudio/reporter/pkg/constant"
 	"github.com/LerianStudio/reporter/pkg/model"
@@ -361,8 +360,7 @@ func TestUseCase_CreateReport_Idempotency(t *testing.T) {
 	cachedResponseJSON, err := json.Marshal(reportEntity)
 	require.NoError(t, err, "failed to marshal report entity for cached response")
 
-	// Idempotency TTL: 24 hours as specified in requirements
-	idempotencyTTL := 24 * time.Hour
+	idempotencyTTL := constant.IdempotencyTTL
 
 	tests := []struct {
 		name           string

components/manager/internal/services/create-template_test.go

@@ -602,8 +602,7 @@ func TestUseCase_CreateTemplate_Idempotency(t *testing.T) {
 	cachedResponseJSON, err := json.Marshal(templateEntity)
 	require.NoError(t, err, "failed to marshal template entity for cached response")
 
-	// Idempotency TTL: 24 hours as specified in requirements
-	idempotencyTTL := 24 * time.Hour
+	idempotencyTTL := constant.IdempotencyTTL
 
 	tests := []struct {
 		name           string

pkg/constant/redis.go

@@ -15,8 +15,8 @@ const (
 	// IdempotencyKeyPrefix is the Redis key prefix for idempotency locks.
 	IdempotencyKeyPrefix = "idempotency"
 
-	// IdempotencyTTL is the time-to-live for idempotency keys (24 hours).
-	IdempotencyTTL = 24 * time.Hour
+	// IdempotencyTTL is the time-to-live for idempotency keys (30 seconds).
+	IdempotencyTTL = 30 * time.Second
 
 	// IdempotencyKeyCtx is the context key for client-provided Idempotency-Key header values.
 	IdempotencyKeyCtx = contextKey("idempotency_key")