Use permanent rather than session cookies

uffd/default_config.cfg

@@ -9,7 +9,12 @@ USER_SERVICE_MAX_UID=19999
 GROUP_MIN_GID=20000
 GROUP_MAX_GID=49999
 
+# The period of time that a login lasts for.
 SESSION_LIFETIME_SECONDS=3600
+
+# The period of time that the session cookie lasts for. This is refreshed on each page load.
+PERMANENT_SESSION_LIFETIME=2678400
+
 # CSRF protection
 SESSION_COOKIE_SECURE=True
 SESSION_COOKIE_HTTPONLY=True

uffd/session/views.py

@@ -49,6 +49,7 @@ def logout():
 
 def set_session(user, skip_mfa=False):
 	session.clear()
+	session.permanent = True
 	session['user_id'] = user.id
 	session['logintime'] = datetime.datetime.now().timestamp()
 	session['_csrf_token'] = secrets.token_hex(128)