Freegle / Iznik / 11652

73%

Build Type

push

circleci

Committed by edwh

Commit Message

fix(auth): refresh sessions.lastactive to give sliding session expiry

V1 PHP updates sessions.lastactive every 10+ minutes on any authenticated
request. The Go middleware only updated users.lastaccess, leaving
sessions.lastactive frozen at login time. The purge cron deletes sessions
where lastactive < 31 days ago, so active users were being logged out 31
days after login regardless of recent activity.

Uses a single conditional UPDATE (WHERE lastactive < NOW() - 10 MINUTE)
to avoid hammering the DB on every request, matching V1's throttle.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Coverage Stats

13803 of 20741 branches covered (66.55%)

Branch coverage included in aggregate %.

4 of 4 new or added lines in 1 file covered. (100.0%)

14 existing lines in 3 files now uncovered.

101968 of 138154 relevant lines covered (73.81%)

22.56 hits per line