apunkt/SurfSense
1
0
Fork 0
mirror of https://github.com/MODSetter/SurfSense.git synced 2026-06-26 21:39:43 +02:00
Code Issues Projects Releases Packages Wiki Activity

fix(auth):harden session cookie transport

Browse source
This commit is contained in:
Anish Sarkar 2026-06-24 03:55:39 +05:30
parent 9b127a8533
commit fbecbb98b5
3 changed files with 53 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

1
surfsense_backend/app/config/__init__.py
View file

@ -918,6 +918,7 @@ class Config:
ACCESS_TOKEN_LIFETIME_SECONDS = int(
os.getenv("ACCESS_TOKEN_LIFETIME_SECONDS", str(30 * 60)) # 30 minutes
)
MIN_ISSUED_AT = int(os.getenv("MIN_ISSUED_AT", "0"))
REFRESH_TOKEN_LIFETIME_SECONDS = int(
os.getenv("REFRESH_TOKEN_LIFETIME_SECONDS", str(14 * 24 * 60 * 60)) # 2 weeks
)