saopig1andClaude Opus 4.8 c1d73b6ba8 fix(guest): cap guest session TTL on touch ...

The sliding-refresh branch in validateAndTouch hardcoded SESSION_TTL_MS
(7d) for all roles, so a guest session created with GUEST_SESSION_TTL_MS
(1d) was wrongly bumped to 7d on the first touch after the touch
interval. Derive the touch TTL from row.role instead.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-25 16:02:44 +08:00

..

audit.test.ts

feat(auth): user-management audit log (table + record sites + /api/audit endpoint)

2026-05-27 15:04:19 +08:00

audit.ts

feat(perm): admin permissions API + audit + new-member basic tier

2026-05-30 13:44:12 +08:00

avatars.test.ts

feat(data): avatar file store helper

2026-05-07 20:00:56 +08:00

avatars.ts

feat(data): avatar file store helper

2026-05-07 20:00:56 +08:00

config.test.ts

fix(guest): normalize guestMode config on load + strict-boolean authorize gate

2026-06-25 15:59:42 +08:00

config.ts

fix(guest): normalize guestMode config on load + strict-boolean authorize gate

2026-06-25 15:59:42 +08:00

database.test.ts

feat(db): seed reserved guest principal idempotently

2026-06-25 11:30:12 +08:00

database.ts

feat(db): seed reserved guest principal idempotently

2026-06-25 11:30:12 +08:00

permissions-migration.test.ts

feat(perm): one-time backfill of existing members to full access

2026-05-30 13:47:44 +08:00

permissions.test.ts

feat(permissions): guest permission types + resolve guest branch

2026-06-25 11:08:17 +08:00

permissions.ts

feat(permissions): guest permission types + resolve guest branch

2026-06-25 11:08:17 +08:00

sessions.test.ts

fix(guest): cap guest session TTL on touch

2026-06-25 16:02:44 +08:00

sessions.ts

fix(guest): cap guest session TTL on touch

2026-06-25 16:02:44 +08:00

users.test.ts

fix(guest): guard reserved __guest__ principal in user mgmt

2026-06-25 15:54:24 +08:00

users.ts

fix(guest): guard reserved __guest__ principal in user mgmt

2026-06-25 15:54:24 +08:00