fix: [ocisdev-1433] (#748)

[2403905]

• fix: Fixed the revok during the least/read operations and the mutex in a public shares

• fix: [OCISDEV-1433] bound the machine auth call of the metadata storage

The cs3 metadata storage authenticates as a system user before every operation, and that Authenticate call carried no deadline. A gateway that accepted the connection but never answered it - because it was itself waiting on a stalled storage provider - parked the calling goroutine for the lifetime of the process, with no log output at all.

The call now runs on its own bounded context and logs a warning when the deadline is exhausted. The context returned to the caller deliberately keeps no deadline: callers run their own RPC on it after getAuthContext returns.

Adds the first tests for this package, including one that reproduces the unbounded wait against an in-process gateway that never answers.

• fix: [OCISDEV-1433] detect grpc peers that stop answering

The grpc client connections of the pool were created without keepalive parameters, so a peer that stopped answering on an established connection - a black-holed node, a wedged process - was indistinguishable from a peer that was merely slow, and a request without a deadline waited for the lifetime of the process.

The clients now ping the peer while a request is in flight and fail the requests on a connection that does not answer, tunable with GRPC_CLIENT_KEEPALIVE_TIME and GRPC_CLIENT_KEEPALIVE_TIMEOUT. The servers got the matching enforcement policy so they accept those pings.

GRPC_MAX_CONNECTION_AGE is removed along with it. It closed healthy connections on a timer, never ended a request that was already in flight because the grace period was left at infinity, and fell back to doing nothing at all whenever its value had no unit suffix.

• fix: fixed the lazy load mutex

• move resolveLinkshares to the dedicated function

• rewok the default keepalive.ClientParameters

• update the public share manager

• fix: Disable the resolution of public link shares when answering PROPFIND requests.

• fix: Invalidate the cache after write. Moved the db copy from the persist label to the manager.

• fix: fix unsafe type assertions, to avoid the panic

• fix: The keepalive grpc clinet configuration updated

---

[kw-security]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.