add session control to django settings (#2015)

CHANGELOG.rst

@@ -13,6 +13,7 @@ Added
 
 - **General**
     - Python v3.11 support (#1922, #1978)
+    - ``SESSION_COOKIE_AGE`` and ``SESSION_EXPIRE_AT_BROWSER_CLOSE`` Django settings (#2015)
 - **Landingzones**
     - REST API list view pagination (#1994)
     - ``notify_email_zone_status`` user app setting (#1939)

config/settings/base.py

@@ -258,6 +258,8 @@
 # ------------------------------------------------------------------------------
 ROOT_URLCONF = 'config.urls'
 WSGI_APPLICATION = 'config.wsgi.application'
+# Location of root django.contrib.admin URL, use {% url 'admin:index' %}
+ADMIN_URL = 'admin/'
 
 # PASSWORD STORAGE SETTINGS
 # ------------------------------------------------------------------------------
@@ -305,9 +307,12 @@
 # SLUGLIFIER
 AUTOSLUG_SLUGIFY_FUNCTION = 'slugify.slugify'
 
-# Location of root django.contrib.admin URL, use {% url 'admin:index' %}
-ADMIN_URL = 'admin/'
-
+# The age of session cookies in seconds
+SESSION_COOKIE_AGE = env.int('DJANGO_SESSION_COOKIE_AGE', 1209600)
+# Whether to expire the session when the user closes their browser
+SESSION_EXPIRE_AT_BROWSER_CLOSE = env.bool(
+    'DJANGO_SESSION_EXPIRE_AT_BROWSER_CLOSE', False
+)
 
 # Celery
 # ------------------------------------------------------------------------------

docs_manual/source/sodar_release_notes.rst

@@ -16,6 +16,7 @@ Release for SODAR Core v1.0 upgrade, iRODS v4.3 upgrade and feature updates.
 - Add opt-out settings for iRODS data request and zone status update emails
 - Add REST API list view pagination
 - Add Python v3.11 support
+- Add session control in Django settings and environment variables
 - Update minimum supported iRODS version to v4.3.3
 - Update REST API versioning
 - Update REST API views for OpenAPI support