shorter default session expiry, fixes #381

otherwise too many not-expired sessions accumulate in the session store.
This commit is contained in:
Thomas Waldmann 2018-10-18 23:32:54 +02:00
parent 7ba8b6f2fa
commit d494b41a9e

View File

@ -278,7 +278,7 @@ CSRF_COOKIE_HTTPONLY = False
SESSION_COOKIE_NAME = 'sessionid' SESSION_COOKIE_NAME = 'sessionid'
SESSION_COOKIE_PATH = '/' SESSION_COOKIE_PATH = '/'
SESSION_COOKIE_HTTPONLY = True SESSION_COOKIE_HTTPONLY = True
SESSION_COOKIE_AGE = 14 * 24 * 60 * 60 # 14 days, in seconds (remember_me is True) SESSION_COOKIE_AGE = 10 * 60 * 60 # 10 hours, in seconds (remember_me is True), see #381
SESSION_EXPIRE_AT_BROWSER_CLOSE = True # more safe (remember_me is False) SESSION_EXPIRE_AT_BROWSER_CLOSE = True # more safe (remember_me is False)
# Allow SHA1 for host update secrets # Allow SHA1 for host update secrets