Fix hardcoded secret key ttl session

2026-02-05 19:08:18 +08:00
parent 70b61fd8e6
commit ebe7f6222d
1 changed files with 2 additions and 1 deletions
--- a/app/ui.py
+++ b/app/ui.py
@@ -301,7 +301,8 @@ def login():
            flash(_friendly_error_message(exc), "danger")
            return render_template("login.html")
        creds = {"access_key": access_key, "secret_key": secret_key}
-        token = _secret_store().remember(creds, ttl=3600)
+        ttl = int(current_app.permanent_session_lifetime.total_seconds())
+        token = _secret_store().remember(creds, ttl=ttl)
        session["cred_token"] = token
        session.permanent = True
        flash(f"Welcome back, {principal.display_name}", "success")