feat: implement sliding session - extend TTL on each authenticated request

2026-07-18 18:48:21 +02:00
parent b1153e0c54
commit ad41771b10
4 changed files with 25 additions and 2 deletions
@@ -83,6 +83,9 @@ class CSRFMiddleware(BaseHTTPMiddleware):
                        status_code=status.HTTP_403_FORBIDDEN,
                        content={"detail": "CSRF token mismatch", "code": "csrf_token_mismatch"},
                    )
+
+                # Sliding session: also extend TTL on CSRF-validated unsafe requests
+                await redis.expire(f"session:{session_id}", settings.session_ttl_seconds)
            finally:
                await redis.close()