Jul 22 - Update - add audit viewer, CSRF lifetime

2026-07-22 16:59:46 -04:00
parent 8533cbe27c
commit a39fa091fa
8 changed files with 170 additions and 2 deletions
@@ -35,3 +35,9 @@ class Config:

    # Path to the auth log fail2ban watches. Empty -> <appdir>/logs/auth.log
    AUTH_LOG_PATH = os.environ.get("AUTH_LOG_PATH", "")
+
+    # CSRF token lifetime in seconds. Flask-WTF defaults to 3600 (1h), which can
+    # 400 a long edit on save. Blank/None -> token is valid for the whole session
+    # (still single-use-per-session and cookie-bound). Set an integer to override.
+    _csrf_ttl = os.environ.get("WTF_CSRF_TIME_LIMIT", "").strip()
+    WTF_CSRF_TIME_LIMIT = int(_csrf_ttl) if _csrf_ttl.isdigit() else None