Merge pull request #175 from alphagov/fix_cookie_2025_bug

Fix for bug of cookie expiry.
This commit is contained in:
Chris Hill-Scott
2016-02-15 11:53:20 +00:00
2 changed files with 2 additions and 1 deletions

View File

@@ -46,7 +46,7 @@ class ItsdangerousSessionInterface(SessionInterface):
domain=domain)
return
session.permanent = True
expires = datetime.utcnow() + timedelta(app.config.get('PERMANENT_SESSION_LIFETIME'))
expires = datetime.utcnow() + timedelta(seconds=app.config.get('PERMANENT_SESSION_LIFETIME'))
val = self.get_serializer(app).dumps(dict(session))
response.set_cookie(app.session_cookie_name, val,
expires=expires, httponly=True,

View File

@@ -23,6 +23,7 @@ class Config(object):
SESSION_COOKIE_HTTPONLY = True
SESSION_COOKIE_SECURE = False
PERMANENT_SESSION_LIFETIME = 3600 # seconds
SESSION_REFRESH_EACH_REQUEST = True
API_HOST_NAME = os.getenv('API_HOST_NAME')
NOTIFY_API_SECRET = os.getenv('NOTIFY_API_SECRET', "dev-secret")