From f4a5108a55b851a95e52e716614c24f79decadec Mon Sep 17 00:00:00 2001 From: Yajat Sharma Date: Fri, 4 Sep 2026 02:29:03 +0530 Subject: [PATCH] Fix session persistence: enable permanent sessions and increase lifetime to 30 days --- app.py | 3 +++ config.py | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/app.py b/app.py index 12b7aa8..84006d5 100644 --- a/app.py +++ b/app.py @@ -3292,6 +3292,7 @@ def login(): if not user or not pin_ok: return render_template("login.html", error="Invalid username or PIN.") + session.permanent = True session["user_id"] = user["id"] session["username"] = user["username"] @@ -3392,6 +3393,7 @@ def google_auth(): return redirect(session.pop('oauth_redirect_to', url_for("settings"))) # Log them in + session.permanent = True session["user_id"] = user["id"] session["username"] = user["username"] if user["status"] == "blocked": @@ -3450,6 +3452,7 @@ def google_auth(): conn.commit() new_user = conn.execute("SELECT id FROM users WHERE username = ?", (username,)).fetchone() + session.permanent = True session["user_id"] = new_user["id"] session["username"] = username log_activity(new_user["id"], "REGISTER", "User registered via Google") diff --git a/config.py b/config.py index 0ebc082..1911712 100644 --- a/config.py +++ b/config.py @@ -22,7 +22,7 @@ class Config: SESSION_COOKIE_SECURE = False # Set True in production with HTTPS SESSION_COOKIE_HTTPONLY = True SESSION_COOKIE_SAMESITE = 'Lax' - PERMANENT_SESSION_LIFETIME = timedelta(days=7) + PERMANENT_SESSION_LIFETIME = timedelta(days=30) # CSRF Protection WTF_CSRF_ENABLED = True