summaryrefslogtreecommitdiffstats
path: root/packaging
diff options
context:
space:
mode:
authorChristophe Besson <cbesson@gmail.com>2026-09-15 02:16:39 +0200
committerChristophe Besson <cbesson@gmail.com>2026-09-15 02:21:01 +0200
commit73ad8e4eb566fe682107fa7e50ef624591199e99 (patch)
treeff0017d014d46d8835487c080dca55c6def7fd6b /packaging
parentbdefcd025604f2c3009fe5e0cc01213c2ba62a6a (diff)
downloadmeshbay-73ad8e4eb566fe682107fa7e50ef624591199e99.tar.gz
feat(hub): session lifetime is an admin setting, and a browser signs out when idle
Browser idle sign-out (media playback counts as activity; not the desktop app), refresh idle window and maximum session length, in hours. Sign-out now revokes on the hub, and the profile has "sign out everywhere". Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01XuNrwLf5EFWCMHzfoEvnpm
Diffstat (limited to 'packaging')
-rw-r--r--packaging/conf/hub.toml.example3
1 files changed, 2 insertions, 1 deletions
diff --git a/packaging/conf/hub.toml.example b/packaging/conf/hub.toml.example
index 2687a87..b5f3830 100644
--- a/packaging/conf/hub.toml.example
+++ b/packaging/conf/hub.toml.example
@@ -44,7 +44,8 @@ workers = 1
# renews against it long before this runs out. What this bounds is a token
# that leaks.
access_token_ttl = 14400 # 4 h
-refresh_token_ttl = 2592000 # 30 j
+# How long a session lasts (idle, maximum, browser sign-out) is set in the
+# admin panel, not here.
[captcha]
# reCAPTCHA v2 on registration and password reset, so no mail is ever sent