feat: add sliding session timeout with idle and absolute caps

2026-04-26 18:12:37 +09:30
parent 60799bbc52
commit d48e6b2f97
14 changed files with 398 additions and 31 deletions
@@ -59,11 +59,9 @@ def login_required(f):
                error_type="SESSION_INACTIVE"
            )
        
-        # Update last_activity_at timestamp
-        from datetime import datetime, timezone
-        session.last_activity_at = datetime.now(timezone.utc)
-        from gatehouse_app import db
-        db.session.commit()
+        # Extend session via sliding window (updates last_activity_at
+        # and recalculates expires_at within the idle / absolute caps).
+        session.refresh()

        # Set context variables
        g.current_user = session.user