From 2062d57a0a4b332009e02a5a92ad2ae5d5f2c8e3 Mon Sep 17 00:00:00 2001
From: AugusDogus <9794679+AugusDogus@users.noreply.github.com>
Date: Tue, 4 Aug 2026 15:20:19 -0500
Subject: [PATCH] configure long-lived auth sessions

- Set sessions to expire after 400 days
- Refresh the session window at most monthly
---
 packages/auth/src/index.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/packages/auth/src/index.ts b/packages/auth/src/index.ts
index c5dc6fc..2811723 100644
--- a/packages/auth/src/index.ts
+++ b/packages/auth/src/index.ts
@@ -21,6 +21,10 @@ export function initAuth(options: {
     }),
     baseURL: options.baseUrl,
     secret: options.secret,
+    session: {
+      expiresIn: 60 * 60 * 24 * 400, // 400 days (max cookie lifetime browsers allow)
+      updateAge: 60 * 60 * 24 * 30, // roll the window forward on use, at most monthly
+    },
     plugins: [
       oAuthProxy({
         /**