feat: update session cookie management and JWT expiration (#996)

- Increased session cookie max age to 86400 seconds (1 day).
- Updated JWT token lifetime to match the new session duration.

Author: iziang

aperag/views/auth.py

@@ -33,6 +33,8 @@
 
 # --- fastapi-users Implementation ---
 
+COOKIE_MAX_AGE = 86400
+
 
 class UserManager(BaseUserManager[User, str]):
     reset_password_token_secret = "SECRET"
@@ -53,11 +55,11 @@ def parse_id(self, value: any) -> str:
 
 
 def get_jwt_strategy() -> JWTStrategy:
-    return JWTStrategy(secret=SECRET, lifetime_seconds=3600)
+    return JWTStrategy(secret=SECRET, lifetime_seconds=86400)
 
 
 # Transport methods
-cookie_transport = CookieTransport(cookie_name="session", cookie_max_age=3600)
+cookie_transport = CookieTransport(cookie_name="session", cookie_max_age=COOKIE_MAX_AGE)
 
 # Authentication backends
 cookie_backend = AuthenticationBackend(
@@ -394,7 +396,7 @@ async def login_view(
     token = await strategy.write_token(user)
 
     # Set cookie
-    response.set_cookie(key="session", value=token, max_age=3600, httponly=True, samesite="lax")
+    response.set_cookie(key="session", value=token, max_age=COOKIE_MAX_AGE, httponly=True, samesite="lax")
 
     return view_models.User(
         id=str(user.id),