dev_agentandClaude Opus 5.5 52664ad64b Round session cookie Max-Age up to whole seconds ...

A maximum session lifetime with fractional seconds (e.g. 2500ms) was
truncated to a 2-second cookie Max-Age, so the browser dropped the
cookie before the server-side absolute limit. Round up instead; the
stored expires_at keeps the configured duration.

Fixes review finding MQ-19-2.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-03 10:11:10 -04:00

..

auth_test.go

Add server-side sessions, session cookie and logout

2026-10-03 10:02:17 -04:00

auth.go

Add server-side sessions, session cookie and logout

2026-10-03 10:02:17 -04:00

cookie.go

Feature 03 task 1: OIDC login and callback against Authentik (#16)

2026-10-03 09:58:05 -04:00

session_test.go

Round session cookie Max-Age up to whole seconds

2026-10-03 10:11:10 -04:00

session.go

Round session cookie Max-Age up to whole seconds

2026-10-03 10:11:10 -04:00