diff --git a/request_a_govuk_domain/settings.py b/request_a_govuk_domain/settings.py index 40aa84b0..1cf5a18e 100644 --- a/request_a_govuk_domain/settings.py +++ b/request_a_govuk_domain/settings.py @@ -257,6 +257,9 @@ CSRF_FAILURE_VIEW = "request_a_govuk_domain.request.views.csrf_failure_view" SESSION_COOKIE_SECURE = True +# Set session (end-user or admin) to expire in 24 hours +SESSION_COOKIE_AGE = 24 * 60 * 60 + # Content Security Policy: only allow images, stylesheets and scripts from the # same origin as the HTML CSP_IMG_SRC = "'self'"