Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: support configuration of refresh token expiration by environment variable #12335

Merged
merged 1 commit into from
Jan 4, 2025

Conversation

euxx
Copy link
Contributor

@euxx euxx commented Jan 3, 2025

Summary

Resolves #12346

From #9233, the refresh token expiration is currently fixed at 30 days.

For security considerations, the refresh token expiration in our use case needs to be set to 1 day.

With this PR, we can customize the refresh token expiration through environment variable, and bringing more flexibility.

The implementation follows the same pattern as ACCESS_TOKEN_EXPIRE_MINUTES and has been verified locally.

Checklist

  • This change requires a documentation update, included: Dify Document
  • I understand that this PR may be closed in case there was no previous discussion or issues. (This doesn't apply to typos!)
  • I've added a test for each change that was introduced, and I tried as much as possible to make a single atomic change.
  • I've updated the documentation accordingly.
  • I ran dev/reformat(backend) and cd web && npx lint-staged(frontend) to appease the lint gods

@dosubot dosubot bot added size:S This PR changes 10-29 lines, ignoring generated files. 💪 enhancement New feature or request 📚 documentation Improvements or additions to documentation labels Jan 3, 2025
@crazywoola
Copy link
Member

Thanks for the PR.

  • You need to link an issue or create one.
  • Do not modify docker-compose.yml directly, see below.
    # ==================================================================
    # WARNING: This file is auto-generated by generate_docker_compose
    # Do not modify this file directly. Instead, update the .env.example
    # or docker-compose-template.yaml and regenerate this file.
    # ==================================================================

@euxx
Copy link
Contributor Author

euxx commented Jan 3, 2025

Thanks for the PR.

  • You need to link an issue or create one.
  • Do not modify docker-compose.yml directly, see below.
    # ==================================================================
    # WARNING: This file is auto-generated by generate_docker_compose
    # Do not modify this file directly. Instead, update the .env.example
    # or docker-compose-template.yaml and regenerate this file.
    # ==================================================================

Hi, thanks for the review.

I have added and linked the issue (#12346).

And the changes to docker-compose.yml has already been generated by running:

$ cd docker
$ python3 generate_docker_compose
image

@dosubot dosubot bot added the lgtm This PR has been approved by a maintainer label Jan 4, 2025
@crazywoola crazywoola merged commit 1fa6640 into langgenius:main Jan 4, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
📚 documentation Improvements or additions to documentation 💪 enhancement New feature or request lgtm This PR has been approved by a maintainer size:S This PR changes 10-29 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Support configuration of refresh token expiration by environment variable
2 participants