fix: harden login session lifetime

2026-09-22 04:39:10 +08:00
parent 2c8531d9b9
commit c37161db31
6 changed files with 73 additions and 28 deletions
@@ -5,7 +5,8 @@ image.preview=true
 file.remove=3

 Known additional keys from binary/config ecosystem:
-session.timeout
+session.timeout  # login session lifetime in minutes; default 30
+jwt.secret       # optional signing secret; if omitted a random secret is generated per process
 folder.download
 folder.leaf.download
 rule.default