wweir 76ab03df73 fix(admin): keep sessions alive across restarts with sliding expiry ...

Sessions were stored in memory with a fixed 24h TTL, so every process
restart (deploys, crashes) logged everyone out and an active session
could still lapse mid-browsing.

- Admin sessions now persist to admin.session_file (default
  /etc/sower/sessions.json, 0600, atomic temp+rename writes). Sessions
  are restored on startup, dropping already-expired tokens. IO failures
  degrade to the in-memory store.
- Sliding expiry: a session used past the halfway point of its TTL is
  refreshed instead of left to lapse, so active users stay logged in.
  Persisting only on refresh bounds disk writes to a couple per session
  per TTL.
- Login, logout, expiry purge, and refresh all sync the file.

Verified live: after systemctl restart, the pre-restart cookie still
authenticates.

2026-08-06 19:13:35 +08:00

..

admin

fix(admin): keep sessions alive across restarts with sliding expiry

2026-08-06 19:13:35 +08:00

install

feat: add sowerd install and startup validation

2026-03-30 23:02:54 +08:00

metrics

feat(admin): OTEL metrics, real-time rates and in-process history

2026-08-06 17:17:24 +08:00