Files
OFApp/server
Trey T e6c0e2292b Fix login: don't pass expiresIn:undefined to jwt.sign
Newer versions of jsonwebtoken reject undefined for expiresIn with
"expiresIn should be a number of seconds or string representing a timespan".
Omit the option entirely when no expiration is desired — cookie maxAge
already controls session lifetime.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-30 00:29:43 -05:00
..