Default unbounded to false

auth_backend/models/db.py

@@ -158,7 +158,7 @@ class UserSession(BaseDbModel):
     user_id: Mapped[int] = mapped_column(Integer, sqlalchemy.ForeignKey("user.id"))
     expires: Mapped[datetime.datetime] = mapped_column(DateTime, default=session_expires_date)
     token: Mapped[str] = mapped_column(String, unique=True)
-    is_unbounded: Mapped[bool] = mapped_column(Boolean, default=True)
+    is_unbounded: Mapped[bool] = mapped_column(Boolean, default=False)
     last_activity: Mapped[datetime.datetime] = mapped_column(DateTime, default=datetime.datetime.utcnow)
     create_ts: Mapped[datetime.datetime] = mapped_column(DateTime, default=datetime.datetime.utcnow)
     user: Mapped[User] = relationship(

auth_backend/utils/user_session_control.py

@@ -20,7 +20,7 @@ async def create_session(
     scopes_list_names: list[TypeScope] | None,
     expires: datetime | None = None,
     session_name: str | None = None,
-    is_unbounded: bool | None = None,
+    is_unbounded: bool = False,
     *,
     db_session: DbSession,
 ) -> Session:
@@ -34,7 +34,7 @@ async def create_session(
         user_id=user.id, token=random_string(length=settings.TOKEN_LENGTH), session_name=session_name
     )
     user_session.expires = expires or user_session.expires
-    user_session.is_unbounded = user_session.is_unbounded if is_unbounded is None else is_unbounded
+    user_session.is_unbounded = is_unbounded
     db_session.add(user_session)
     db_session.flush()
     if not user_session.is_unbounded: