We already have a login_time stored - the time stamp of the Session instance creation ( created after successful login ).

2025-12-31 16:45:45 +11:00
parent 4b4afe277e
commit 3939ea773f
3 changed files with 13 additions and 14 deletions
--- a/app/controllers/concerns/authentication.rb
+++ b/app/controllers/concerns/authentication.rb
@@ -49,9 +49,6 @@ module Authentication
      user.sessions.create!(user_agent: request.user_agent, ip_address: request.remote_ip).tap do |session|
        Current.session = session

-        # Store auth_time in session for OIDC max_age support
-        session[:auth_time] = Time.now.to_i
-
        # Extract root domain for cross-subdomain cookies (required for forward auth)
        domain = extract_root_domain(request.host)