Merge pull request #63 from unisoncomputing/cp/bump-session-ttl

1 year session times

Author: ChrisPenner

share-auth/src/Share/OAuth/Session.hs

@@ -261,10 +261,10 @@ data LoginRequest
   deriving anyclass (ToJSON, FromJSON)
   deriving (Binary) via JSONBinary LoginRequest
 
--- | Sessions expire in 30 days
+-- | Sessions expire in 1 year
 sessionTTL :: NominalDiffTime
 sessionTTL =
-  (30 * nominalDay)
+  (365 * nominalDay)
 
 createSession :: (MonadIO m) => URI -> Set URI -> UserId -> m Session
 createSession sessionIssuer sessionAudience sessionUserId = do

src/Share/Web/Authentication.hs

@@ -14,17 +14,17 @@ module Share.Web.Authentication
 where
 
 import Data.Time
+import Servant
 import Share.IDs
 import Share.OAuth.Session (Session (..), pattern AuthenticatedUser, pattern MaybeAuthedUserID, pattern Unauthenticated)
 import Share.Utils.Logging qualified as Logging
 import Share.Web.App
 import Share.Web.Errors
 import Share.Web.Errors qualified as Errors
-import Servant
 
 cookieSessionTTL :: NominalDiffTime
 cookieSessionTTL =
-  30 * nominalDay
+  365 * nominalDay
 
 data UnauthenticatedError = UnauthenticatedError
   deriving stock (Show)