lucia-auth / lucia

Authentication, simple and clean
https://lucia-auth.com
MIT License
8.41k stars 449 forks source link

Use Expires instead Max-Age for cookies #1492

Open Ryiski opened 3 months ago

Ryiski commented 3 months ago

Package

lucia

Describe the bug

Oslo is setting Max-Age as seconds which is an issue for Express.js where Max-Age should be as milliseconds.

@pilcrowOnPaper suggested using Expires instead Max-Age in core package.