flo/nsupdate.info
1
0
Fork 0
Code Issues 1 Pull Requests 2 Packages Releases Activity

Merge pull request #383 from ThomasWaldmann/default-session-expiry

Browse Source 
shorter default session expiry, fixes #381
This commit is contained in:
TW 2018-10-19 20:06:22 +02:00 committed by GitHub
commit 6bd52d7f00
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nsupdate/settings/base.py
View File

@ -278,7 +278,7 @@ CSRF_COOKIE_HTTPONLY = False
SESSION_COOKIE_NAME = 'sessionid'
SESSION_COOKIE_PATH = '/'
SESSION_COOKIE_HTTPONLY = True
SESSION_COOKIE_AGE = 14 * 24 * 60 * 60 # 14 days, in seconds (remember_me is True)
SESSION_COOKIE_AGE = 10 * 60 * 60 # 10 hours, in seconds (remember_me is True), see #381
SESSION_EXPIRE_AT_BROWSER_CLOSE = True # more safe (remember_me is False)
# Allow SHA1 for host update secrets