progmaweb/apps/api/appsettings.json, branch security/next-16.4.2 The site and account service of Progmasoft: a Next.js frontend and an ASP.NET Core API. Keep account sessions for 30 days 2026-10-16T03:46:23+00:00 Leitwolf11 2026-10-16T03:46:23+00:00 205d91185e22b9129c528296cf07d15225d82866 A session of a Progmasoft Account, whether opened with a password or with Google, lasted 12 hours from the sign-in, and the setting could not raise it beyond 7 days. Sessions now last 30 days by default, and AccountSessions:LifetimeHours may set anything from 1 hour up to that new maximum of 720 hours; a value outside the range is clamped to it, as before. The lifetime stays fixed from the sign-in; it is not extended by use. The production environment file sets no lifetime, so the new default applies there once the API is deployed. Sessions opened before keep the expiry they were given. New tests check the 30-day default and the clamping of 0, 12, 720 and 10 000 hours. The account API document gives the new default and range. 
A session of a Progmasoft Account, whether opened with a password or with
Google, lasted 12 hours from the sign-in, and the setting could not raise
it beyond 7 days. Sessions now last 30 days by default, and
AccountSessions:LifetimeHours may set anything from 1 hour up to that new
maximum of 720 hours; a value outside the range is clamped to it, as
before.

The lifetime stays fixed from the sign-in; it is not extended by use. The
production environment file sets no lifetime, so the new default applies
there once the API is deployed. Sessions opened before keep the expiry
they were given.

New tests check the 30-day default and the clamping of 0, 12, 720 and
10 000 hours. The account API document gives the new default and range.
Complete production activation hardening: allow the explicit loopback and canonical Progmasoft hosts used by the Next.js API proxy, and omit MemoryDenyWriteExecute only for the CoreCLR service because the .NET JIT requires managed executable mappings while all other systemd protections remain enabled. 2026-08-28T20:38:41+00:00 Leitwolf11 2026-08-28T20:38:41+00:00 f92a585d831c8c0304073d2c518bc393957d7ac6 






Initialize Progmaweb 1.0.0 corporate and account platform: add a responsive Next.js corporate site without Visual X# compiler-pipeline content, host-aware account routes, registration and dashboard UX, an ASP.NET Core authentication API with account policies, password hashing, secure sessions, rate limiting and security headers, integration tests on Microsoft Testing Platform, locked dependency graphs, reproducible local orchestration, and separate frontend, backend and security workflows.
2026-08-28T20:03:57+00:00

Leitwolf11

2026-08-28T20:03:57+00:00

18da54ce240b1bfefce36aa2ec3b44b58bd0dbde