From 583e35c76857fa78e1f434fdf153d5f706886cd1 Mon Sep 17 00:00:00 2001 From: Clayton Chew Date: Tue, 9 Jun 2026 08:47:19 +0800 Subject: [PATCH] fix: ensures new expire on setSessionCookie (#2708) --- packages/auth/server/lib/session/session-cookies.ts | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/packages/auth/server/lib/session/session-cookies.ts b/packages/auth/server/lib/session/session-cookies.ts index cf2dea247..39ed9f45c 100644 --- a/packages/auth/server/lib/session/session-cookies.ts +++ b/packages/auth/server/lib/session/session-cookies.ts @@ -30,7 +30,6 @@ export const sessionCookieOptions = { sameSite: useSecureCookies ? 'none' : 'lax', secure: useSecureCookies, domain: getCookieDomain(), - expires: new Date(Date.now() + AUTH_SESSION_LIFETIME), } as const; export const extractSessionCookieFromHeaders = (headers: Headers): string | null => { @@ -56,7 +55,10 @@ export const getSessionCookie = async (c: Context): Promise => { * @param sessionToken - The session token to set. */ export const setSessionCookie = async (c: Context, sessionToken: string) => { - await setSignedCookie(c, sessionCookieName, sessionToken, getAuthSecret(), sessionCookieOptions).catch((err) => { + await setSignedCookie(c, sessionCookieName, sessionToken, getAuthSecret(), { + ...sessionCookieOptions, + expires: new Date(Date.now() + AUTH_SESSION_LIFETIME), + }).catch((err) => { appLog('SetSessionCookie', `Error setting signed cookie: ${err}`); throw err;