🔒 Made session-tokens more secure

2023-01-22 00:17:09 +01:00
parent f532e503d6
commit 95b0a4fa63
3 changed files with 55 additions and 11 deletions
@@ -43,7 +43,7 @@ async def log_user_in(user: User, request: Request, response: Response):
        value=f"Bearer {access_token}",
        httponly=True,
        samesite="lax",
-        max_age=settings.access_token_expire_minutes * 60,
+        max_age=60 * 60 * 24 * 365,
    )
    response.set_cookie(
        key="rememberme_token", value=session_key, httponly=True, samesite="lax", max_age=60 * 60 * 24 * 365
@@ -64,7 +64,7 @@ async def rememberme_check(rememberme_token: str, response: Response):
        value=f"Bearer {access_token}",
        httponly=True,
        samesite="lax",
-        max_age=settings.access_token_expire_minutes * 60,
+        max_age=60 * 60 * 24 * 365,
    )
    response.set_cookie(key="expiry", value="", max_age=settings.access_token_expire_minutes * 60)
    response.status_code = 200