fix: increase expiry for AURLANG cookie; only set when needed

We add a new config option for cookies with a 400 day lifetime.
AURLANG should survive longer for unauthenticated users.
Today they have to set this again after each browser restart.
(for users whose browsers wipe session cookies on close)

authenticated users don't need this cookie
since the setting is saved to the DB

Signed-off-by: moson-mo <mo-son@mailbox.org>
This commit is contained in:
moson-mo 2023-05-25 14:07:27 +02:00
parent 638ca7b1d0
commit 57c154a72c
No known key found for this signature in database
GPG key ID: 4A4760AB4EE15296
2 changed files with 23 additions and 10 deletions

View file

@ -14,8 +14,12 @@ passwd_min_len = 8
default_lang = en
default_timezone = UTC
sql_debug = 0
; 2 hours - default login_timeout
login_timeout = 7200
; 30 days - default persistent_cookie_timeout
persistent_cookie_timeout = 2592000
; 400 days - default permanent_cookie_timeout
permanent_cookie_timeout = 34560000
max_filesize_uncompressed = 8388608
disable_http_login = 1
aur_location = https://aur.archlinux.org