Session expiration not working as expected

[bcasci]

I have the the timeout_at and expires_at set at the default settings. From
What I understand, this means the session is good for 1 year and a magic link is good for 1 hour. However when I am logged in, I am eventually asked to log back in after a time. What could I missing? Are sessions invalidated after a period of inactivity?

[mikker]

Passwordless can't remember longer than Rails does. Did you try this?

#102 (comment)

1.0 should fix this by removing just controlling token expiration.

[bcasci]

Yes...that was the missing link! Thank you. Oh, and remembering to restart the servers too ;). It's easy to over look this detail after years of using the typical Rails authentication libraries which generally obscure you from having to configure session options.