From ccd05b16605deb7c349ae506a316f5001bd3d021 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Simon=20K=C3=BChn?= <simon@kuehn.de>
Date: Mon, 11 May 2026 22:23:38 +0200
Subject: [PATCH] Extend session lifetime to 7 days

Overrides PHP's default session.gc_maxlifetime (typically 1h on servers)
so sessions survive inactivity without relying on remember-me.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 config/packages/framework.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/config/packages/framework.yaml b/config/packages/framework.yaml
index 7e1ee1f..ec05da3 100644
--- a/config/packages/framework.yaml
+++ b/config/packages/framework.yaml
@@ -3,7 +3,10 @@ framework:
     secret: '%env(APP_SECRET)%'
 
     # Note that the session will be started ONLY if you read or write from it.
-    session: true
+    session:
+        gc_maxlifetime: 604800
+        cookie_lifetime: 604800
+        cookie_samesite: 'lax'
 
     #esi: true
     #fragments: true