From 82e830da827fece994cd661d56682f22d76f2620 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Johan=20Alfred=C3=A9en?= Date: Wed, 20 Mar 2024 07:55:21 +0100 Subject: [PATCH] Added new Django configuration setting for expiration of authentication tokens. (#33) --- scaleout/stackn/templates/studio-settings-configmap.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/scaleout/stackn/templates/studio-settings-configmap.yaml b/scaleout/stackn/templates/studio-settings-configmap.yaml index f4a0f00..06066c5 100644 --- a/scaleout/stackn/templates/studio-settings-configmap.yaml +++ b/scaleout/stackn/templates/studio-settings-configmap.yaml @@ -227,13 +227,16 @@ data: } # Session settings for managing automatic login expiration. - # The age of session cookies, in seconds. Set to 1 day = 86400 seconds: + # The age of session cookies, in seconds. Default set to 1 day = 86400 seconds: SESSION_COOKIE_AGE = {{ .Values.studio.session_cookie_age | default 86400 }} # Whether to save the session data on every request. For sliding expiration: SESSION_SAVE_EVERY_REQUEST = True # Whether to expire the session when the user closes their browser: SESSION_EXPIRE_AT_BROWSER_CLOSE = False + # The expiration duration in seconds for authentication tokens. Default set to 1 day: + AUTH_TOKEN_EXPIRATION = {{ .Values.studio.auth_token_expiration | default 86400 }} + # Settings for the Django Axes brute force login protection # Number of allowed login failures before action is taken AXES_FAILURE_LIMIT = {{ .Values.studio.axes_failure_limit | default 10 }}