fix: set max age of access token cookie to 15 minutes

2026-04-05 07:47:01 +02:00 · 2024-06-30 20:10:16 +02:00
parent db2720ab7b
commit 2dac38560b
1 changed files with 1 additions and 1 deletions
--- a/backend/src/auth/auth.service.ts
+++ b/backend/src/auth/auth.service.ts
@@ -229,7 +229,7 @@ export class AuthService {
    if (accessToken)
      response.cookie("access_token", accessToken, {
        sameSite: "lax",
-        maxAge: 1000 * 60 * 60 * 24 * 30 * 3, // 3 months
+        maxAge: 1000 * 60 * 60 * 15, // 15 minutes
      });
    if (refreshToken)
      response.cookie("refresh_token", refreshToken, {