Variable: SESSION_EXPIRY_COOKIE_DEFAULTS

const SESSION_EXPIRY_COOKIE_DEFAULTS: object

Session-expiry hint cookie attributes. Deliberately NOT httpOnly — the value is only an absolute ISO timestamp (no secret), readable so the proactive scheduler can arm on a cold start without a whoami round-trip. It lives as long as the refresh session (30 days), NOT as long as the short access token: a returning visitor whose access token has lapsed must still find this hint on a cold start so the app renders signed-in and recovers the session (a past timestamp tells the scheduler to refresh immediately) instead of flashing signed-out.

Type Declaration

httpOnly

readonly httpOnly: false = false

maxAge

readonly maxAge: number

name

readonly name: "session-expiry" = SESSION_EXPIRY_COOKIE_NAME

path

readonly path: "/" = '/'

sameSite

readonly sameSite: "lax"

secure

readonly secure: boolean = SECURE