finnandClaude Opus 5.5
8e32727fcd
The session store held at most 100 sessions and evicted the least recently used one. Anyone with an account could log in 101 times and thereby log out every other user, including the admins. - Each user has at most 10 sessions. A new login above the limit removes the user's own least recently used session (by _last_seen). - There is no global limit anymore: the store only accepts sessions with a user_id (raises SessionWithoutUser otherwise), so it is bounded by 10 * number of users. Anonymous users still create no store entries. - save_session clears an invalid session before re-raising, since Flask saves the session again for the error response. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
MAX
A small little program to manage emails.
The proxy should add X-Real-IP to get a better logging.
Setup
Requirements: Docker, Make
Start with make run-dev
Configuration
MAX_ORIGIN(required in production): The public origin of MAX, e.g.https://max.finn.st