Revert "fix: enforce configured session timeout"

This reverts commit 75d6e45080.
2026-09-21 20:00:27 +08:00
parent 725c3a08b1
commit 20e77e47c9
2 changed files with 3 additions and 14 deletions
@@ -339,16 +339,12 @@ func (s *Server) session(w http.ResponseWriter, r *http.Request) {
 		writeJSONError(w, http.StatusNotFound, "user or password is wrong")
 		return
 	}
-	ttl := 365 * 24 * time.Hour
-	if s.SessionTimeout > 0 {
-		ttl = time.Duration(s.SessionTimeout) * time.Minute
-	}
-	token, err := auth.NewTokenWithTTL(a.Username, ttl)
+	token, err := auth.NewToken(a.Username)
 	if err != nil {
 		writeJSONError(w, http.StatusInternalServerError, "failed to create token")
 		return
 	}
-	expires := time.Now().Add(ttl)
+	expires := time.Now().Add(365 * 24 * time.Hour)
 	http.SetCookie(w, &http.Cookie{Name: "JWT", Value: token, Path: "/", Expires: expires, HttpOnly: true})
 	http.SetCookie(w, &http.Cookie{Name: "user", Value: a.Username, Path: "/", Expires: expires})
 	w.WriteHeader(http.StatusCreated)