diff options
| author | Peter Stone <thepeterstone@gmail.com> | 2026-09-02 23:14:40 +0000 |
|---|---|---|
| committer | Peter Stone <thepeterstone@gmail.com> | 2026-09-02 23:14:40 +0000 |
| commit | 74bf58335d3542d88b32d447b47342a76f5e5449 (patch) | |
| tree | 640d073c09156fe346db9faf32817ed34261a82e /internal/config | |
| parent | 0642dab358ac7c84d56314277d4664043598dcc5 (diff) | |
Extend session lifetime and idle timeout from 7 days / 24h to 1 year
Single-user personal server -- there's no one else's session at risk
from staying logged in, so the short expiry was just friction. The 24h
idle timeout was the more disruptive of the two in practice: a day of
not opening the dashboard is a normal gap, not "abandoned," and was
forcing a re-login well before the 7-day Lifetime ever mattered.
Setting IdleTimeout = SessionLifetime rather than a separate shorter
value collapses this to one real limit instead of two overlapping ones
that could reproduce the same complaint later (e.g. a few weeks away).
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018AwnALZL6bD4VBtATDVv3B
Diffstat (limited to 'internal/config')
| -rw-r--r-- | internal/config/constants.go | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/internal/config/constants.go b/internal/config/constants.go index 1311302..98c7a60 100644 --- a/internal/config/constants.go +++ b/internal/config/constants.go @@ -45,7 +45,10 @@ const ( // Session settings const ( - SessionLifetime = 7 * 24 * time.Hour // 7 days for mobile convenience + // Single-user personal server -- there's no one else's session to protect by + // forcing frequent re-logins, so this is set for "don't make me log in again," + // not for a shared/multi-tenant threat model. + SessionLifetime = 365 * 24 * time.Hour ) // Rate limiting |