diff --git a/server/auth.js b/server/auth.js index 2dc4c03..8a1f8aa 100644 --- a/server/auth.js +++ b/server/auth.js @@ -68,11 +68,11 @@ export default class AuthHandler { const token = jwt.sign(payload, secret, options); res.cookie("auth_token", token, { - httpOnly: true, // cannot be accessed by JS - secure: process.env.ENV === "production", // only over HTTPS - sameSite: "lax", // like SameSiteLaxMode - maxAge: 2 * 60 * 60 * 1000, // 2 hours in milliseconds - path: "/", // available on entire site + httpOnly: true, // cannot be accessed by JS + secure: process.env.ENV === "production", // only over HTTPS + sameSite: "lax", // like SameSiteLaxMode + maxAge: 60 * 24 * 60 * 60 * 1000, // 60 days + path: "/", // available on entire site domain: process.env.ENV === "production" ? "." + process.env.BASE_URL : undefined });