How to configure pow session expire time

defmodule AlivaWeb.Endpoint do
  use Phoenix.Endpoint, otp_app: :aliva
  @pow_config otp_app: :aliva
  @pow_config [
    repo: Aliva.Repo,
    user: Aliva.Users.User,
    current_user_assigns_key: :current_user,
    session_key: "auth",
    credentials_cache_store: {Pow.Store.CredentialsCache,
                              ttl: :timer.minutes(1),
                              namespace: "credentials"},
    session_ttl_renewal: :timer.minutes(1),
    cache_store_backend: Pow.Store.Backend.EtsCache,
    users_context: Pow.Ecto.Users
  ]
  # The session will be stored in the cookie and signed,
  # this means its contents can be read but not tampered with.
  # Set :encryption_salt if you would also like to encrypt it.
  @session_options [
    store: :cookie,
    key: "_aliva_key",
    signing_salt: "LOlti+7w",
    max_age: 1 * 60
  ]

  socket "/socket", AlivaWeb.UserSocket,
    websocket: [
      connect_info: [pow_config: @pow_config]
    ],
    websocket: true,
    longpoll: false

  # socket "/live", Phoenix.LiveView.Socket, websocket: [connect_info: [session: @session_options]]

  # Serve at "/" the static files from "priv/static" directory.
  # You should set gzip to true if you are running phx.digest
  # when deploying your static files in production.
  plug Plug.Static,
    at: "/",
    from: :aliva,
    gzip: false,
    only: ~w(css fonts images js favicon.ico robots.txt)

  # Code reloading can be explicitly enabled under the
  # :code_reloader configuration of your endpoint.
  if code_reloading? do
    socket "/phoenix/live_reload/socket", Phoenix.LiveReloader.Socket
    plug Phoenix.LiveReloader
    plug Phoenix.CodeReloader
    plug Phoenix.Ecto.CheckRepoStatus, otp_app: :aliva
  end

  plug Phoenix.LiveDashboard.RequestLogger,
    param_key: "request_logger",
    cookie_key: "request_logger"

  plug Plug.RequestId
  plug Plug.Telemetry, event_prefix: [:phoenix, :endpoint]

  plug Plug.Parsers,
    parsers: [:urlencoded, :multipart, :json],
    pass: ["*/*"],
    json_decoder: Phoenix.json_library()

  plug Plug.MethodOverride
  plug Plug.Head

  plug Plug.Session, @session_options
  plug Pow.Plug.Session, @pow_config
  plug Pow.Plug.Session, otp_app: :aliva
  plug Pow.Plug.Session,
     otp_app: :aliva,
     session_ttl_renewal: :timer.minutes(1),
     credentials_cache_store: {Pow.Store.CredentialsCache, ttl: :timer.minutes(1)}

  plug AlivaWeb.Router
end

this is endpoint file code
Pow default time working but @pow_config that I added in endpoint is not working. @powcofig option @session_ttl_renewal and @credentials_cache_store is set to1 min but instead of 1 min it always expires after 30 min which is the default

2 Likes

thanks this was helpful!