fix: set max-age default cookie option to a sensible value

supabase · Aug 28, 2024 · 92ecd82 · 92ecd82
1 parent a48fe6f
commit 92ecd82
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/utils/constants.ts b/src/utils/constants.ts
@@ -4,5 +4,7 @@ export const DEFAULT_COOKIE_OPTIONS: CookieOptions = {
   path: "/",
   sameSite: "lax",
   httpOnly: false,
-  maxAge: 60 * 60 * 24 * 365 * 1000,
+  // https://developer.chrome.com/blog/cookie-max-age-expires
+  // https://httpwg.org/http-extensions/draft-ietf-httpbis-rfc6265bis.html#name-cookie-lifetime-limits
+  maxAge: 400 * 24 * 60 * 60,
 };