goffee/cup
1
0
Fork 2
Code Issues Pull requests Projects Releases 17 Packages Wiki Activity Actions

- Refactory cookie and API session handle. Insolated y routes and controllers (api-auth.go, app-auth.go).

Browse source 
- Cookie lifetime with sliding expiration
- Fix bug single global expiresAt in JWT, now each token has unique ExpiresAt
This commit is contained in:
Zeni Kim 2026-09-12 21:26:01 -05:00
parent bf8e2e90ec
commit 10ded026df
10 changed files with 358 additions and 304 deletions
Download patch file Download diff file Expand all files Collapse all files

3
.env-dev
View file

@ -24,12 +24,13 @@ TEMPLATE_ENABLE=true
APP_ENABLE=true
CDNEnable=false
COOKIE_SECRET=13d6b4dff8f84a10851021ec8608f814570d562c92fe6b5ec4c9f595bcb3234b
COOKIE_SECURE=false
#######################################
###### JWT ######
#######################################
JWT_SECRET=dkfTgonmgaAdlgkw
JWT_LIFESPAN_MINUTES=1440 # expires after 1 day
JWT_LIFESPAN_MINUTES=5 # expires after 1 day
#######################################
###### DATABASE ######