2 commits

Author	SHA1	Message	Date
moson-mo	22fe4a988a	fix: make AURSID a session cookie if "remember me" is not checked ... This should match more closely the expectation of a user. A session cookie should vanish on browser close and you thus they need to authenticate again. There is no need to bump the expiration of AURSID either, so we can remove that part. Signed-off-by: moson-mo <mo-son@mailbox.org>	2023-05-26 22:57:47 +02:00
moson-mo	0807ae6b7c	test: add tests for cookie handling ... add a bunch of test cases to ensure our cookies work properly Signed-off-by: moson-mo <mo-son@mailbox.org>	2023-05-26 22:57:46 +02:00