# HG changeset patch
# User Matt Johnston <matt@ucc.asn.au>
# Date 1563893064 -28800
# Node ID a99631597f65cb961205dbfca7c454f201fe257c
# Parent  ef407d48cbe5dfa1f2221a5dd556d166c509de9b
don't expire cookies soon

diff -r ef407d48cbe5 -r a99631597f65 web/secure.py
--- a/web/secure.py	Tue Jul 23 22:44:12 2019 +0800
+++ b/web/secure.py	Tue Jul 23 22:44:24 2019 +0800
@@ -36,7 +36,8 @@
     c = bottle.request.get_cookie(AUTH_COOKIE)
     if not c:
         c = binascii.hexlify(os.urandom(AUTH_COOKIE_LEN))
-        bottle.response.set_cookie(AUTH_COOKIE, c, secure=True, httponly=True)
+        years = 60*60*24*365
+        bottle.response.set_cookie(AUTH_COOKIE, c, secure=True, httponly=True, max_age=10*years)
     return cookie_hash(c)
 
 def check_cookie(allowed_users):