Function getSessionSecret

backend/src/auth/session.utils.ts:7–16

()

export const SESSION_COOKIE_MAX_AGE = 7 * 24 * 60 * 60 * 1000; // 7 days

function getSessionSecret(): string {
  const secret = process.env.SESSION_SECRET;
  if (!secret) {
    if (process.env.NODE_ENV === 'production') {
      throw new Error('SESSION_SECRET is required in production for session authentication');
    }
    return 'local-dev-session-secret';
  }
  return secret;
}

export interface SessionPayload {
  username: string;