From 73ad8e4eb566fe682107fa7e50ef624591199e99 Mon Sep 17 00:00:00 2001 From: Christophe Besson Date: Tue, 15 Sep 2026 02:16:39 +0200 Subject: feat(hub): session lifetime is an admin setting, and a browser signs out when idle Browser idle sign-out (media playback counts as activity; not the desktop app), refresh idle window and maximum session length, in hours. Sign-out now revokes on the hub, and the profile has "sign out everywhere". Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01XuNrwLf5EFWCMHzfoEvnpm --- packaging/conf/hub.toml.example | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'packaging') diff --git a/packaging/conf/hub.toml.example b/packaging/conf/hub.toml.example index 2687a87..b5f3830 100644 --- a/packaging/conf/hub.toml.example +++ b/packaging/conf/hub.toml.example @@ -44,7 +44,8 @@ workers = 1 # renews against it long before this runs out. What this bounds is a token # that leaks. access_token_ttl = 14400 # 4 h -refresh_token_ttl = 2592000 # 30 j +# How long a session lasts (idle, maximum, browser sign-out) is set in the +# admin panel, not here. [captcha] # reCAPTCHA v2 on registration and password reset, so no mail is ever sent -- cgit v1.2.3