mirror of
https://github.com/better-auth/better-auth.git
synced 2026-10-20 20:26:55 -05:00
Apply suggestions from code review
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
This commit is contained in:
committed by
Alex Yang
co-authored by
Copilot
parent
26919d97f6
commit
b2809636a7
@@ -240,12 +240,16 @@ export async function authorize(
|
||||
// max_age=0 is equivalent to prompt=login
|
||||
let requireLogin = promptSet.has("login");
|
||||
if (query.max_age !== undefined) {
|
||||
const sessionAge =
|
||||
(Date.now() - new Date(session.session.createdAt).getTime()) / 1000;
|
||||
if (sessionAge > query.max_age) {
|
||||
// Session is older than max_age, force reauthentication
|
||||
requireLogin = true;
|
||||
const maxAge = Number(query.max_age);
|
||||
if (Number.isInteger(maxAge) && maxAge >= 0) {
|
||||
const sessionAge =
|
||||
(Date.now() - new Date(session.session.createdAt).getTime()) / 1000;
|
||||
if (sessionAge > maxAge) {
|
||||
// Session is older than max_age, force reauthentication
|
||||
requireLogin = true;
|
||||
}
|
||||
}
|
||||
// If max_age is invalid (not a non-negative integer), ignore it per OIDC spec
|
||||
}
|
||||
|
||||
const requireConsent =
|
||||
|
||||
Reference in New Issue
Block a user