Non-rolling sessions never expire?

[luke-ansa]

Hello!

I see that there is a comment in src/server/auth-client.ts:
// TODO: this should only happen if rolling sessions are enabled.

It seems like non-rolling sessions will be refreshed any time a page load happens, and add the original absoluteDuration to the current time each time. Does this mean that if I have a non-rolling session with an absoluteDuration of, say, 2 days, the session will have an expiration that is always 2 days from the time of the handler call, until perpetuity?

 calculateMaxAge(createdAt: number) {
    if (!this.rolling) {
      return this.absoluteDuration;
    }
     ...
   }

// Later:
const expiration = Date.now() / 1000 + maxAge;
const jwe = await cookies.encrypt(
  {
    id: sessionId
  },
  this.secret,
  expiration
);