add max age

Author: nora-shap

codecov_auth/admin.py

@@ -1,3 +1,4 @@
+import datetime
 import logging
 from datetime import timedelta
 from typing import Optional, Sequence
@@ -92,11 +93,13 @@ def impersonate_owner(self, request, queryset):
 
     # this cookie is read by the `ImpersonationMiddleware` and
     # will reset `request.current_owner` to the impersonated owner
+    max_age = datetime.timedelta(minutes=3)
     response.set_cookie(
         "staff_user",
         owner.ownerid,
         domain=settings.COOKIES_DOMAIN,
         samesite=settings.COOKIE_SAME_SITE,
+        max_age=max_age,
     )
     History.log(
         Owner.objects.get(ownerid=owner.ownerid),