peterstockings/Stride
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Keep login sessions persistent across browser restarts

Browse Source
This commit is contained in:
Peter Stockings
2026-10-22 23:07:46 +11:00
parent d660b86bb0
commit b8eb6d10f8
4 changed files with 45 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+3
View File
@@ -130,6 +130,9 @@ The application uses CSRF protection, hashed passwords, login throttling, and
server-side authorization on every activity page and data endpoint. Email
verification/recovery and shared production rate-limit storage remain outstanding.
Deployment instructions and sync behavior are in docs/DEPLOYMENT.md.
Sign-ins persist across browser restarts and renew on use, with an effectively
unlimited application lifetime (100 years). Browsers may cap cookie retention;
signing out, clearing cookies, or changing the application secret ends access.
The local server binds only to loopback; production runs behind the Dokku HTTPS proxy.
Users will upload FIT files or connect Garmin by authenticating locally with