From: Marius Gavrilescu <marius@ieval.ro>
Date: Sun, 1 Mar 2015 12:07:00 +0000 (+0200)
Subject: Reduce default reset token validity to 1 hour
X-Git-Tag: 0.001~5
X-Git-Url: http://git.ieval.ro/?p=plack-middleware-auth-complex.git;a=commitdiff_plain;h=fe1dfcf1b405e78bcd789e120138fbcc673e5903

Reduce default reset token validity to 1 hour
---

diff --git a/lib/Plack/Middleware/Auth/Complex.pm b/lib/Plack/Middleware/Auth/Complex.pm
index 4efd0ec..e272f18 100644
--- a/lib/Plack/Middleware/Auth/Complex.pm
+++ b/lib/Plack/Middleware/Auth/Complex.pm
@@ -29,7 +29,7 @@ sub default_opts {(
 	realm             => 'restricted area',
 	cache_fail        => 0,
 	cache_max_age     => 5 * 60,
-	token_max_age     => 60 * 60 * 24,
+	token_max_age     => 60 * 60,
 	username_regex    => qr/^\w{2,20}$/a,
 	register_url      => '/action/register',
 	passwd_url        => '/action/passwd',
@@ -379,7 +379,7 @@ to 5 minutes.
 
 =item token_max_age
 
-Password reset token validity, in seconds. Defaults to 24 hours.
+Password reset token validity, in seconds. Defaults to 1 hour.
 
 =item username_regex