Extending the Login Session to 1 Year for Kiosk‑Mode TV Screens (Next.js API Route)
TL;DR: I changed the maxAge of the auth cookie from 30 days to 365 days in src/app/api/login/route.ts. The tweak lets a TV kiosk stay logged in without a daily refresh, while keeping the same security flags.
The Problem
Our kiosk‑mode deployment runs on large‑format TVs that display a live dashboard. The UI is protected by the same JWT‑based authentication we use for the web app. After a user logs in, the server sets a Set-Cookie header with the token:
cookie: serialize("token", jwt, {
