refresh ttl fixed to 30 days

dsd-meetme · Jan 7, 2016 · 07d42f9 · 07d42f9
1 parent 403f6b1
commit 07d42f9
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/config/jwt.php b/config/jwt.php
@@ -38,7 +38,7 @@
     |
     */
 
-    'refresh_ttl' => 20160,
+    'refresh_ttl' => 43200, //30 days
 
     /*
     |--------------------------------------------------------------------------

diff --git a/readme.md b/readme.md
@@ -53,6 +53,7 @@ After cloning and installing repository:
  * tmp dir permissions needed
  * The library is tested only on linux, we don't know the behaviour of critical parts (optimisation and caldav sync) on other systems
  * Details about optimisation task [https://docs.google.com/document/d/18vCFEVrd8ENgS80hC-ACjSicDFYXV2QjoFiO3FiGZ5w/edit](https://docs.google.com/document/d/18vCFEVrd8ENgS80hC-ACjSicDFYXV2QjoFiO3FiGZ5w/edit)
+ * after 30 days you have to re-login, this for security reasons to avoid that a malicious guy can use the token to get new tokens and he stays always connected even if you change password 
 
 
 # Credits
-Original file line number
+Diff line change
@@ Expand Up / @@ -38,7 +38,7 @@ @@
         |
         */
-        'refresh_ttl' => 20160,
+        'refresh_ttl' => 43200, //30 days
         /*
         |--------------------------------------------------------------------------
@@ Expand Down @@