mirror of
https://github.com/logicog/RTLPlayground.git
synced 2026-10-29 17:54:14 +08:00
The session timer was refreshed only when a page from the file table was served, so a client that loads its pages once and then talks to the JSON endpoints alone is logged out SESSION_TIMEOUT seconds after the load, however busy it is. A firmware upload started after that point is answered with 401 instead of a verdict. Refresh the timer wherever the session cookie validates, which covers every authenticated request, and drop the file-serving refresh that this makes redundant.