From 9bff27abfcaf8a6ac43fa33c5cfe1e6513248939 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Mon, 12 Dec 2022 19:01:31 +0100
Subject: [PATCH] set live time of token from settings

---
 class.paperless.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/class.paperless.php b/class.paperless.php
index 0b5732b..8ebec35 100644
--- a/class.paperless.php
+++ b/class.paperless.php
@@ -159,7 +159,11 @@ class SeedDMS_ExtPaperless_RestAPI_Controller { /* {{{ */
 			else {
 				if(!empty($settings->_extensions['paperless']['jwtsecret'])) {
 					$token = new SeedDMS_JwtToken($settings->_extensions['paperless']['jwtsecret']);
-					if(!$tokenstr = $token->jwtEncode($userobj->getId().':'.(time()+84600))) {
+					if(!empty($settings->_extensions['paperless']['tokenlivetime']))
+						$days = (int) $settings->_extensions['paperless']['tokenlivetime'];
+					else
+						$days = 1000;
+					if(!$tokenstr = $token->jwtEncode($userobj->getId().':'.(time()+$days*84600))) {
 						return $response->withStatus(403);
 					}
 					return $response->withJson(array('token'=>$tokenstr), 200);