No description
Filip Kin
04662711a2
All checks were successful
deploy / build-and-deploy (push) Successful in 1m3s
Session tokens had a hard 7-day expiry with no renewal, so an active user had to re-enter credentials every week or two. Make the expiry a 30-day SLIDING window: every authenticated request extends expires_at (written at most ~once a day per token, off the hot path), so a device used regularly never has to sign in again; a token only lapses after the full idle window with no activity. Server-only change - the client already reuses its stored token and re-validates on each launch/sync, so it benefits with no change. |
||
|---|---|---|
| .forgejo/workflows | ||
| app | ||
| ci | ||
| docs | ||
| server | ||
| wear | ||
| .dockerignore | ||
| .gitignore | ||
| bun.lock | ||
| Dockerfile | ||
| Dockerfile.android | ||
| package.json | ||
| README.md | ||