ken/muxplex
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

style(auth): clarify ttl_seconds is signing-time passthrough in create_session_cookie

Browse Source
This commit is contained in:
Brian Krabach
2026-03-28 21:16:16 -07:00
parent 22816cd1d5
commit 79dade7af7
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
muxplex/auth.py
+2
View File
@@ -78,6 +78,8 @@ def load_or_create_secret() -> str:
def create_session_cookie(secret: str, ttl_seconds: int) -> str: def create_session_cookie(secret: str, ttl_seconds: int) -> str:
"""Create a signed, timestamped session cookie value.""" """Create a signed, timestamped session cookie value."""
signer = TimestampSigner(secret) signer = TimestampSigner(secret)
# ttl_seconds is not used at signing time; the timestamp is embedded in
# the signed value and checked against ttl_seconds during verification.
return signer.sign("muxplex-session").decode() return signer.sign("muxplex-session").decode()