initial commit

server/utils/session.js

@@ -0,0 +1,15 @@
+const DEFAULT_DAYS = 7
+const MIN_DAYS = 1
+const MAX_DAYS = 365
+
+/**
+ * Session lifetime in days (for cookie and DB expires_at). Uses SESSION_MAX_AGE_DAYS.
+ * Clamped to 1–365 days.
+ */
+export function getSessionMaxAgeDays() {
+  const raw = process.env.SESSION_MAX_AGE_DAYS != null
+    ? Number.parseInt(process.env.SESSION_MAX_AGE_DAYS, 10)
+    : Number.NaN
+  if (Number.isFinite(raw)) return Math.max(MIN_DAYS, Math.min(MAX_DAYS, raw))
+  return DEFAULT_DAYS
+}