feat: update session cookie management and JWT expiration

[iziang]

• Increased session cookie max age to 86400 seconds (1 day).
• Updated JWT token lifetime to match the new session duration.

[cursor]

Bug: JWT Lifetime Mismatch Causes Authentication Issues

The JWT strategy's lifetime is hardcoded to 86400 seconds, creating an inconsistency with cookie expiration which uses the COOKIE_MAX_AGE constant. This can lead to authentication issues if COOKIE_MAX_AGE is updated, as JWT token and cookie expiration times may become misaligned.

aperag/views/auth.py#L57-L58

ApeRAG/aperag/views/auth.py

Lines 57 to 58 in e885890

	def get_jwt_strategy() -> JWTStrategy:
	return JWTStrategy(secret=SECRET, lifetime_seconds=86400)

Fix in Cursor

---

BugBot free trial expires on July 22, 2025
You have used $0.00 of your $1.00 spend limit so far. Manage your spend limit in the Cursor dashboard.

Was this report helpful? Give feedback by reacting with 👍 or 👎