Browse Source

fix(server): Increase authentication cookie max-age (#1971)

This got missed in #1381.
bo0tzz 2 years ago
parent
commit
838ea56605
2 changed files with 7 additions and 7 deletions
  1. 1 1
      server/libs/domain/src/auth/auth.core.ts
  2. 6 6
      server/libs/domain/test/fixtures.ts

+ 1 - 1
server/libs/domain/src/auth/auth.core.ts

@@ -24,7 +24,7 @@ export class AuthCore {
   }
 
   public getCookies(loginResponse: LoginResponseDto, authType: AuthType, isSecure: boolean) {
-    const maxAge = 7 * 24 * 3600; // 7 days
+    const maxAge = 400 * 24 * 3600; // 400 days
 
     let authTypeCookie = '';
     let accessTokenCookie = '';

+ 6 - 6
server/libs/domain/test/fixtures.ts

@@ -338,8 +338,8 @@ export const loginResponseStub = {
       shouldChangePassword: false,
     },
     cookie: [
-      'immich_access_token=cmFuZG9tLWJ5dGVz; HttpOnly; Secure; Path=/; Max-Age=604800; SameSite=Lax;',
-      'immich_auth_type=oauth; HttpOnly; Secure; Path=/; Max-Age=604800; SameSite=Lax;',
+      'immich_access_token=cmFuZG9tLWJ5dGVz; HttpOnly; Secure; Path=/; Max-Age=34560000; SameSite=Lax;',
+      'immich_auth_type=oauth; HttpOnly; Secure; Path=/; Max-Age=34560000; SameSite=Lax;',
     ],
   },
   user1password: {
@@ -354,8 +354,8 @@ export const loginResponseStub = {
       shouldChangePassword: false,
     },
     cookie: [
-      'immich_access_token=cmFuZG9tLWJ5dGVz; HttpOnly; Secure; Path=/; Max-Age=604800; SameSite=Lax;',
-      'immich_auth_type=password; HttpOnly; Secure; Path=/; Max-Age=604800; SameSite=Lax;',
+      'immich_access_token=cmFuZG9tLWJ5dGVz; HttpOnly; Secure; Path=/; Max-Age=34560000; SameSite=Lax;',
+      'immich_auth_type=password; HttpOnly; Secure; Path=/; Max-Age=34560000; SameSite=Lax;',
     ],
   },
   user1insecure: {
@@ -370,8 +370,8 @@ export const loginResponseStub = {
       shouldChangePassword: false,
     },
     cookie: [
-      'immich_access_token=cmFuZG9tLWJ5dGVz; HttpOnly; Path=/; Max-Age=604800; SameSite=Lax;',
-      'immich_auth_type=password; HttpOnly; Path=/; Max-Age=604800; SameSite=Lax;',
+      'immich_access_token=cmFuZG9tLWJ5dGVz; HttpOnly; Path=/; Max-Age=34560000; SameSite=Lax;',
+      'immich_auth_type=password; HttpOnly; Path=/; Max-Age=34560000; SameSite=Lax;',
     ],
   },
 };