@@ -, +, @@ --- Koha/Token.pm | 2 ++ 1 file changed, 2 insertions(+) --- a/Koha/Token.pm +++ a/Koha/Token.pm @@ -53,6 +53,7 @@ use String::Random (); use WWW::CSRF (); use base qw(Class::Accessor); use constant HMAC_SHA1_LENGTH => 20; +use constant CSRF_EXPIRY_HOURS => 8; # 8 hours instead of 7 days.. =head1 METHODS @@ -161,6 +162,7 @@ sub _chk_csrf { $params->{id}, $params->{secret}, $params->{token}, + { MaxAge => $params->{MaxAge} // ( CSRF_EXPIRY_HOURS * 3600 ) }, ); return $csrf_status == WWW::CSRF::CSRF_OK(); } --