From 08fb2db96e775c01804e6cdcba19a0fac9001d68 Mon Sep 17 00:00:00 2001 From: Anton Afanasyeu Date: Sat, 11 Jul 2026 14:48:27 +0200 Subject: [PATCH] fix(session): 24h cookie lifetime and account-security route Co-authored-by: Cursor --- platform/shared_session.php | 2 +- src/bootstrap.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/platform/shared_session.php b/platform/shared_session.php index 5ea0f6a..1488bd2 100644 --- a/platform/shared_session.php +++ b/platform/shared_session.php @@ -30,7 +30,7 @@ function platform_start_session(string $sessionName = 'ac_crash_sess', string $c } session_name($sessionName); session_set_cookie_params([ - 'lifetime' => 0, + 'lifetime' => 86400, 'path' => $cookiePath, 'httponly' => true, 'samesite' => 'Lax', diff --git a/src/bootstrap.php b/src/bootstrap.php index a2e9d4d..c386701 100644 --- a/src/bootstrap.php +++ b/src/bootstrap.php @@ -119,7 +119,7 @@ function resolve_console_route(string $uri): string { if ($projectRoot !== '' && str_starts_with($uri, $projectRoot)) { $suffix = substr($uri, strlen($projectRoot)) ?: '/'; $candidate = rtrim(strtok($suffix, '?') ?: '/', '/') ?: '/'; - if (preg_match('#^/(login|logout|register|verify-email|two-factor(?:/approve)?|api/two-factor(?:/poll)?)(/|$)#', $candidate)) { + if (preg_match('#^/(login|logout|register|verify-email|account-security|two-factor(?:/approve)?|api/two-factor(?:/poll)?)(/|$)#', $candidate)) { return $candidate; } }