fix(auth): set session expires_at to non-nullable with 1 year max

2026-07-05 23:21:54 +08:00
parent d7780ea6ad
commit 46670c72fa
2 changed files with 2 additions and 2 deletions
--- a/app/models.py
+++ b/app/models.py
@@ -28,7 +28,7 @@ class UserSession(Base):
    token = Column(String(64), primary_key=True)
    user_id = Column(Integer, ForeignKey("users.id", ondelete="CASCADE"), nullable=False)
    created_at = Column(DateTime, default=_utcnow)
-    expires_at = Column(DateTime, nullable=True)
+    expires_at = Column(DateTime, nullable=False)

    user = relationship("User", back_populates="sessions")