From b0375c89f5077ece7a16cfe59c077ea856eb77bc Mon Sep 17 00:00:00 2001
From: Niklas Elsbrock <mail@nelsbrock.de>
Date: Sat, 25 Dec 2021 23:37:23 +0100
Subject: [PATCH] =?UTF-8?q?Anmeldesitzungsl=C3=A4ngen=20konfigurierbar=20g?=
 =?UTF-8?q?emacht?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nateman/blueprints/auth.py           | 4 +++-
 nateman/resources/default-config.yml | 8 ++++++++
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/nateman/blueprints/auth.py b/nateman/blueprints/auth.py
index dc87978..80409c2 100644
--- a/nateman/blueprints/auth.py
+++ b/nateman/blueprints/auth.py
@@ -179,7 +179,9 @@ def login():
 
     current_app.logger.info(f"{lehrer} hat sich angemeldet.")
 
-    session_expiry_delta = timedelta(days=12) if remember_me else timedelta(hours=1)
+    session_expiry_delta = timedelta(
+        minutes=(config["auth"]["session-remember-me-duration"] if remember_me else config["auth"]["session-duration"])
+    )
     session = Session.create(lehrer, session_expiry_delta)
 
     if not lehrer.pwd_changed:
diff --git a/nateman/resources/default-config.yml b/nateman/resources/default-config.yml
index 4a26ab5..a3cefbe 100644
--- a/nateman/resources/default-config.yml
+++ b/nateman/resources/default-config.yml
@@ -17,6 +17,14 @@ default-new-lehrer-password: ""
 #email-address-format: ""
 
 
+auth:
+  # Maximale Anmeldesitzungslänge in Minuten
+  session-duration: 60
+  # Maximale Anmeldesitzungslänge mit aktiviertem "Angemeldet bleiben" in Minuten
+  # Voreinstellung: (90 * 24 * 60) Minuten = 90 Tage
+  session-remember-me-duration: 129600
+
+
 schule:
   # Name der Schule
   name: "Max-Mustermann-Schule"