Andrey Antukh d6e82f44a6

✨ Enforce absolute maximum session duration (#11447) ...

Session tokens now carry an :exp claim anchored to created-at (not
modified-at), so activity cannot extend the session beyond the
absolute maximum (default 30 days, configurable via
PENPOT_AUTH_TOKEN_COOKIE_MAX_AGE_ABSOLUTE). The existing token
verification already rejects expired tokens, so enforcement is
automatic. Also extends the GC task to purge expired
http_session_v2 rows, which were previously never cleaned up.

Closes #11444

AI-assisted-by: longcat-2.0

2026-09-09 11:45:28 +02:00

..

test_files

♻️ Consolidate auto-link libraries with unified export-type and fix ref integrity (#9958)

2026-08-27 10:09:52 +02:00

auth_oidc_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-08-26 20:14:51 +02:00

binfile_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-01 12:45:17 +02:00

bounce_handling_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

db_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-01 12:45:17 +02:00

demo_test.clj

✨ Add several improvements for demo profile creation mechanism (#11257)

2026-09-01 08:46:28 +02:00

email_blacklist_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

email_sending_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

graph_binder_gate_test.clj

✨ Add the graph subsystem and graph visualization console to the backend (#11101)

2026-08-27 18:54:56 +02:00

graph_sync_parity_test.clj

✨ Add the graph subsystem and graph visualization console to the backend (#11101)

2026-08-27 18:54:56 +02:00

helpers.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

http_assets_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-08-26 20:14:51 +02:00

http_management_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

http_middleware_security.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

http_middleware_test.clj

✨ Enforce absolute maximum session duration (#11447)

2026-09-09 11:45:28 +02:00

loggers_webhooks_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

logical_deletion_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

media_remote_test.clj

Revert "🐛 Enforce SSRF checks and add timeouts to HTTP client (#11474)" (#11556)

2026-09-08 13:38:00 +02:00

media_sanitize_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

media_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

passwords_test.clj

⬆️ Update JVM, pnpm and node dependencies (#11404)

2026-09-01 12:01:35 +02:00

rpc_access_tokens_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_audit_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_auth_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_binfile_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_commands_error_reports_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_comment_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-01 12:45:17 +02:00

rpc_cond_middleware_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_demo_test.clj

✨ Add skip-onboarding option to create-demo-profile (#11526)

2026-09-07 11:15:17 +02:00

rpc_doc_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_feedback_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_file_snapshot_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_file_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_file_thumbnails_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_font_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-01 12:45:17 +02:00

rpc_management_nitrate_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-01 12:45:17 +02:00

rpc_management_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_media_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_nitrate_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-08-26 20:14:51 +02:00

rpc_organization_owner_permissions_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_plugins_test.clj

🐛 Add dedicated RPC methods for plugin registry operations

2026-09-07 09:30:01 +02:00

rpc_profile_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-01 12:45:17 +02:00

rpc_project_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_quotes_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-08-26 20:14:51 +02:00

rpc_rlimit_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

rpc_team_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-04 11:00:56 +02:00

rpc_viewer_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-01 12:45:17 +02:00

rpc_webhooks_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

shell_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

storage_test.clj

✨ Add storage object status lifecycle and verified dedup (#11345)

2026-08-27 12:37:05 +02:00

tasks_telemetry_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-09 10:31:41 +02:00

util_blob_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

util_objects_map_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

util_pointer_map_test.clj

📎 Update copyright name on file header (#11346)

2026-08-25 11:55:10 +02:00

util_ssrf_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-09-01 12:45:17 +02:00