@payez/next-mvp 4.1.8 → 4.1.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/api-handlers/auth/refresh.js +38 -15
- package/dist/auth/better-auth.js +4 -3
- package/dist/lib/ensure-fresh-access-token.js +30 -7
- package/dist/lib/session-store.d.ts +1 -0
- package/dist/lib/session-store.js +12 -8
- package/package.json +893 -893
- package/src/api-handlers/auth/refresh.ts +38 -15
- package/src/auth/better-auth.ts +4 -3
- package/src/lib/ensure-fresh-access-token.ts +358 -335
- package/src/lib/session-store.ts +4 -1
package/src/lib/session-store.ts
CHANGED
|
@@ -26,7 +26,10 @@ const getSessionVersionKey = (token: string) => `${getSessionPrefix()}ver:${toke
|
|
|
26
26
|
const getBetterAuthSessionKey = (token: string, appSlug?: string) => `ba:${appSlug || 'app'}:${token}`;
|
|
27
27
|
|
|
28
28
|
const REFRESH_LOCK_TTL = 60; // 60 seconds
|
|
29
|
-
|
|
29
|
+
// 3 days in seconds (matches refresh token lifetime). EXPORTED as the single source
|
|
30
|
+
// of session TTL — better-auth.ts derives its BA-session Redis TTL from this so the
|
|
31
|
+
// two can never drift apart again (the 7d-vs-3d drift = the zombie-session window, QA 6952).
|
|
32
|
+
export const SESSION_TTL = 3 * 24 * 60 * 60;
|
|
30
33
|
|
|
31
34
|
export interface RefreshLockInfo {
|
|
32
35
|
sessionToken: string;
|