From 42d3f4a4e9588bf224de14cac46db370aa425683 Mon Sep 17 00:00:00 2001 From: Rijk van Zanten Date: Fri, 26 Apr 2019 15:55:08 -0400 Subject: [PATCH] Increase expiry time of tokens from 5 to 20 minutes (#913) It should still be pretty secure. This allows the app to go easier on the refreshing, and it makes sure that you can upload large files without having the token expire halfway through. --- src/core/Directus/Authentication/Provider.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/core/Directus/Authentication/Provider.php b/src/core/Directus/Authentication/Provider.php index 2be8bbffef..ca9a58c680 100644 --- a/src/core/Directus/Authentication/Provider.php +++ b/src/core/Directus/Authentication/Provider.php @@ -71,7 +71,7 @@ public function __construct(UserProviderInterface $userProvider, array $options throw new Exception('auth: secret key is required and it must be a string'); } - $ttl = ArrayUtils::get($options, 'ttl', 5); + $ttl = ArrayUtils::get($options, 'ttl', 20); if (!is_numeric($ttl)) { throw new Exception('ttl must be a number'); }