feat: add sliding session timeout with idle and absolute caps

2026-04-26 18:12:37 +09:30
parent 60799bbc52
commit d48e6b2f97
14 changed files with 398 additions and 31 deletions
@@ -48,6 +48,10 @@ class BaseConfig:
        seconds=int(os.getenv("MAX_SESSION_DURATION", "86400"))
    )

+    # Session timeout policy (seconds)
+    SESSION_IDLE_TIMEOUT = int(os.getenv("SESSION_IDLE_TIMEOUT", "900"))
+    SESSION_ABSOLUTE_TIMEOUT = int(os.getenv("SESSION_ABSOLUTE_TIMEOUT", "28800"))
+
    # CORS
    CORS_ORIGINS = os.getenv(
        "CORS_ORIGINS",