gnacho 2fc08f40d2 httpd: drop Max-Age from the session cookie ...

The server timeout is an inactivity timeout: scan_header() refreshes
last_session_use on every authenticated request. Max-Age counts from
login instead, and the cookie is only set there, so the browser deletes
it session_timeout seconds after logging in however busy the session
is. Leave expiry to the server, which already handles it.

The five-digit itoa16_html() stays: information.json must print
timeouts from 10000 to 65535 correctly.

2026-09-25 23:22:35 +02:00

..

httpd.c

httpd: drop Max-Age from the session cookie

2026-09-25 23:22:35 +02:00

httpd.h

Add caching and usage of MIME-type enums

2025-08-20 10:11:31 +02:00

page_impl.c

Merge remote-tracking branch 'origin/main' into feat/session-timeout-config

2026-09-25 23:16:16 +02:00

page_impl.h

Merge remote-tracking branch 'origin/main' into feat/session-timeout-config

2026-09-25 23:16:16 +02:00

treatasm.py

http: use python3.

2025-08-27 23:11:12 +02:00