Reduce default reset token validity to 1 hour

[plack-middleware-auth-complex.git] / lib / Plack / Middleware / Auth / Complex.pm

diff --git a/lib/Plack/Middleware/Auth/Complex.pm b/lib/Plack/Middleware/Auth/Complex.pm
index 4efd0ecb48f1588d219e13fff4ea38338d40e41b..e272f18b431e57099cd5934550113c812d07579a 100644 (file)
--- a/lib/Plack/Middleware/Auth/Complex.pm
+++ b/lib/Plack/Middleware/Auth/Complex.pm
@@ -29,7 +29,7 @@ sub default_opts {(
        realm             => 'restricted area',
        cache_fail        => 0,
        cache_max_age     => 5 * 60,
-       token_max_age     => 60 * 60 * 24,
+       token_max_age     => 60 * 60,
        username_regex    => qr/^\w{2,20}$/a,
        register_url      => '/action/register',
        passwd_url        => '/action/passwd',
@@ -379,7 +379,7 @@ to 5 minutes.
 
 =item token_max_age
 
-Password reset token validity, in seconds. Defaults to 24 hours.
+Password reset token validity, in seconds. Defaults to 1 hour.
 
 =item username_regex