You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# We set the expiration to 100 years, because we can't really access the expiration of the refresh token everywhere we are setting it.
422
+
# We set the expiration to 1 year, because we can't really access the expiration of the refresh token everywhere we are setting it.
423
423
# This should be safe to do, since this is only the validity of the cookie (set here or on the frontend) but we check the expiration of the JWT anyway.
424
424
# Even if the token is expired the presence of the token indicates that the user could have a valid refresh
425
-
# Setting them to infinity would require special case handling on the frontend and just adding 10 years seems enough.
426
-
get_timestamp_ms() + HUNDRED_YEARS_IN_MS,
425
+
# Some browsers now cap the maximum expiry at 400 days, so we set it to 1 year, which should suffice.
0 commit comments