Bump up the forward auth token ttl, fix leaking of error data

2025-11-09 12:27:53 +11:00
parent 4df2eee4d9
commit 11ec753c68
2 changed files with 7 additions and 7 deletions
--- a/app/controllers/concerns/authentication.rb
+++ b/app/controllers/concerns/authentication.rb
@@ -120,11 +120,11 @@ module Authentication
      # Generate a secure random token
      token = SecureRandom.urlsafe_base64(32)

-      # Store it with an expiry of 30 seconds
+      # Store it with an expiry of 60 seconds
      Rails.cache.write(
        "forward_auth_token:#{token}",
        session_obj.id,
-        expires_in: 30.seconds
+        expires_in: 60.seconds
      )

      # Set the token as a query parameter on the redirect URL