larvit/plainpages
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Configure Kratos session settings (todo §3); branded cookie, 720h lifespan, 24h sliding-refresh window

Browse Source
This commit is contained in:
Lilleman auf Larv
2026-06-17 11:27:56 +02:00
parent d6960c9bad
commit 0313f48112
3 changed files with 19 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/kratos.test.ts
View File

@@ -62,6 +62,12 @@ test("recovery + verification run on email code, delivered by a courier", () =>
assert.match(compose, /--watch-courier/, "kratos dispatches queued mail (else codes never send)");
});
test("session settings: branded cookie, bounded lifespan, sliding refresh", () => {
assert.match(kratosYml, /name:\s*plainpages_session/, "branded session cookie name");
assert.match(kratosYml, /lifespan:\s*720h/, "session has a bounded lifespan");
assert.match(kratosYml, /earliest_possible_extend:\s*24h/, "sliding-refresh window is set");
});
test("social sign-in is off by default — a clean clone stays password-only", () => {
// The oidc method ships present-but-disabled with no providers; operators activate it
// purely via env (SELFSERVICE_METHODS_OIDC_*) — no code change, no baked-in creds.