configure long-lived auth sessions

[AugusDogus]

Summary

• Configure auth sessions to expire after 400 days.
• Refresh active sessions at most monthly.

Testing

• Not run.

Summary by CodeRabbit

• New Features
  • Sessions now remain valid for up to 400 days.
  • Sessions are refreshed every 30 days to help maintain continued access.

Note

Configure long-lived auth sessions with 400-day expiry and 30-day rolling window

Sets explicit session options in index.ts: expiresIn of 400 days and updateAge of 30 days. Previously, sessions used default expiry; now they persist much longer and refresh their expiry on use within the 30-day window.

^{Macroscope summarized 2062d57.}

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
whisp	Ready	Preview	Aug 4, 2026 8:21pm

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: b63c3a29-4eb8-4071-9527-1a74d0756482

📥 Commits

Reviewing files that changed from the base of the PR and between f5f7de0 and 2062d57.

📒 Files selected for processing (1)

• packages/auth/src/index.ts

---

Walkthrough

initAuth now configures sessions with a 400-day expiration and a 30-day update interval.

Changes

Auth Session Configuration

Layer / File(s)	Summary
Session lifetime settings packages/auth/src/index.ts	The auth initializer sets session expiration to 400 days and rolling updates to 30 days.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Poem

A rabbit hops through auth with cheer,
Four hundred days of sessions here.
Each month, a gentle update springs,
While stable login comfort brings.

 / \_/\\
( o.o )
 > ^ <

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change to configure long-lived authentication sessions.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}