/**
 * Centralized session policy for VAPT compliance.
 * Keep strict constants (no environment overrides) to prevent accidental relaxation.
 */

export const ACCESS_TOKEN_TTL = '30m';
export const REFRESH_TOKEN_TTL = '30m';
export const ACCESS_TOKEN_TTL_MS = 30 * 60 * 1000;
export const REFRESH_TOKEN_TTL_MS = 30 * 60 * 1000;

