moby/brewlog
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: persist session cookie with max-age for Safari PWA support

Browse source 
Session cookie lacked a Max-Age attribute, making it ephemeral. Safari's
standalone PWA mode aggressively clears session cookies on app suspend,
causing frequent logouts. Set Max-Age to 30 days to match the server-side
session lifetime.
This commit is contained in:
Jon Seager 2026-02-15 10:36:05 +00:00
parent 5820c162f6
commit 12dcc37cbe
No known key found for this signature in database
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
src/application/routes/api/auth/webauthn.rs
View file

@ -518,6 +518,7 @@ async fn create_session(state: &AppState, cookies: &Cookies, user_id: crate::dom
cookie.set_path("/"); cookie.set_path("/");
cookie.set_http_only(true); cookie.set_http_only(true);
cookie.set_same_site(tower_cookies::cookie::SameSite::Lax); cookie.set_same_site(tower_cookies::cookie::SameSite::Lax);
cookie.set_max_age(tower_cookies::cookie::time::Duration::days(30));
if !state.insecure_cookies { if !state.insecure_cookies {
cookie.set_secure(true); cookie.set_secure(true);