Whitewater
b22bc17bd0
## Summary This is a backend-only workaround for native/mobile sessions expiring much earlier than the normal AFFiNE auth session. Native JWT-backed sessions now use the existing `auth.session.ttl` instead of the hard-coded 15-minute TTL. No database migration, no new config, and no mobile client changes are required. ## Background / Investigation PR #15060 introduced native session exchange and JWT-backed native sessions for mobile/desktop clients. Relevant code introduced there: - `packages/backend/server/src/core/auth/session-issuer.ts` - Native clients no longer receive normal auth cookies. - `SessionIssuer` clears cookies for native clients and returns a native session exchange code instead. - `packages/backend/server/src/core/auth/native-exchange.ts` - Native clients exchange the one-time code for a JWT-backed session token. - `packages/backend/server/src/core/auth/jwt-session.ts` - The JWT session implementation was introduced with: - `const JWT_SESSION_TTL = 15 * 60` - `expiresIn: JWT_SESSION_TTL` - normal `jwt.verify(...)` expiration enforcement That means a native/mobile client that does not reconnect and exchange/sign in again within 15 minutes can lose backend auth even though the DB-backed AFFiNE user session is still valid for the normal app session TTL, currently 15 days by default. Web does not hit this path because web keeps using the normal cookie-backed session issued by `AuthService`, whose expiration is based on `auth.session.ttl`. ## Related Issues / PRs Checked - Source PR: #15060 - Introduced native session exchange, JWT-backed sessions, native token storage, and websocket JWT support. - This PR appears to be the source of the hard-coded 15-minute native JWT TTL behavior. I did not find a public issue that directly reports "native JWT expires after 15 minutes". ## What Changed - Removed the hard-coded 15-minute native JWT TTL. - Updated `JwtSessionService.sign()` to issue native JWTs with `auth.session.ttl`. - Kept `JwtSessionService.verify()` on normal JWT expiration verification, so existing JWTs that already expired under the previous 15-minute `exp` need to be refreshed by signing in again. - Kept the existing DB-backed session lookup: - sign-out still revokes the native JWT by deleting the backing session - expired/deleted DB sessions still reject the JWT ## Why This Is A Workaround A more complete long-term design would add a true refresh-token flow for native clients, likely with persisted refresh tokens, rotation/revocation semantics, and database changes. This PR intentionally avoids that larger design. It restores the expected mobile login lifetime for newly issued native JWTs by aligning native JWT lifetime with the existing app session lifetime, while preserving the current native exchange model, Keychain/Keystore storage, and revoke-by-session behavior. ## Compatibility - Backend only - No DB schema change - No mobile app change - No new config - Existing native JWTs that already expired under the old 15-minute `exp` will still require signing in again. - Newly issued native JWTs use `auth.session.ttl`. ## Verification Latest verification after removing the extra native JWT TTL config: - JWT session tests: 4 passed - `yarn typecheck`: passed - `lint-staged`: passed via `corepack yarn` - `lint:ox`: passed via `corepack yarn` Earlier broader checks on this branch also passed selected auth tests and the websocket JWT auth subset. <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **New Features** * Session login tokens now follow the configured session lifetime, so expiration behavior can be adjusted through app settings. * **Bug Fixes** * Improved consistency between token expiration and session expiry checks. * Added coverage for cases where a session is missing, expired, or the session lifetime changes. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
AFFiNE.Pro
Write, Draw and Plan All at Once
A privacy-focused, local-first, open-source, and ready-to-use alternative for Notion & Miro.
One hyper-fused platform for wildly creative minds.
Getting started & staying tuned with us.
Star us, and you will receive all release notifications from GitHub without any delay!
What is AFFiNE
AFFiNE is an open-source, all-in-one workspace and an operating system for all the building blocks that assemble your knowledge base and much more -- wiki, knowledge management, presentation and digital assets. It's a better alternative to Notion and Miro.
Features
A true canvas for blocks in any form. Docs and whiteboard are now fully merged.
- Many editor apps claim to be a canvas for productivity, but AFFiNE is one of the very few which allows you to put any building block on an edgeless canvas -- rich text, sticky notes, any embedded web pages, multi-view databases, linked pages, shapes and even slides. We have it all.
Multimodal AI partner ready to kick in any work
- Write up professional work report? Turn an outline into expressive and presentable slides? Summary an article into a well-structured mindmap? Sorting your job plan and backlog for tasks? Or... draw and code prototype apps and web pages directly all with one prompt? With you, AFFiNE AI pushes your creativity to the edge of your imagination, just like Canvas AI to generate mind map for brainstorming.
Local-first & Real-time collaborative
- We love the idea of local-first that you always own your data on your disk, in spite of the cloud. Furthermore, AFFiNE supports real-time sync and collaborations on web and cross-platform clients.
Self-host & Shape your own AFFiNE
- You have the freedom to manage, self-host, fork and build your own AFFiNE. Plugin community and third-party blocks are coming soon. More tractions on Blocksuite. Check there to learn how to self-host AFFiNE.
Acknowledgement
“We shape our tools and thereafter our tools shape us”. A lot of pioneers have inspired us along the way, e.g.:
- Quip & Notion with their great concept of “everything is a block”
- Trello with their Kanban
- Airtable & Miro with their no-code programmable datasheets
- Miro & Whimiscal with their edgeless visual whiteboard
- Remote & Capacities with their object-based tag system
There is a large overlap of their atomic “building blocks” between these apps. They are not open source, nor do they have a plugin system like Vscode for contributors to customize. We want to have something that contains all the features we love and also goes one step even further.
Thanks for checking us out, we appreciate your interest and sincerely hope that AFFiNE resonates with you! 🎵 Checking https://affine.pro/ for more details ions.
Contributing
| Bug Reports | Feature Requests | Questions/Discussions | AFFiNE Community |
|---|---|---|---|
| Create a bug report | Submit a feature request | Check GitHub Discussion | Visit the AFFiNE's Discord |
| Something isn't working as expected | An idea for a new feature, or improvements | Discuss and ask questions | A place to ask, learn and engage with others |
Calling all developers, testers, tech writers and more! Contributions of all types are more than welcome, you can read more in docs/types-of-contributions.md. If you are interested in contributing code, read our docs/CONTRIBUTING.md and feel free to check out our GitHub issues to get stuck in to show us what you’re made of.
Before you start contributing, please make sure you have read and accepted our Contributor License Agreement. To indicate your agreement, simply edit this file and submit a pull request.
For bug reports, feature requests and other suggestions you can also create a new issue and choose the most appropriate template for your feedback.
For translation and language support you can visit our Discord.
If you have questions, you are welcome to contact us. One of the best places to get more info and learn more is in the Discord where you can engage with other like-minded individuals.
Templates
AFFiNE now provides pre-built templates from our team. Following are the Top 10 most popular templates among AFFiNE users,if you want to contribute, you can contribute your own template so other people can use it too.
- vision board template
- one pager template
- sample lesson plan math template
- grr lesson plan template free
- free editable lesson plan template for pre k
- high note collection planners
- digital planner
- ADHD Planner
- Reading Log
- Cornell Notes Template
Blog
Welcome to the AFFiNE blog section! Here, you’ll find the latest insights, tips, and guides on how to maximize your experience with AFFiNE and AFFiNE AI, the leading Canvas AI tool for flexible note-taking and creative organization.
- vision board template
- ai homework helper
- vision board maker
- itinerary template
- one pager template
- cornell notes template
- swot chart template
- apps like luna task
- note taking ai from rough notes to mind map
- canvas ai
- one pager
- SOP Template
- Chore Chart
Ecosystem
| Name | ||
|---|---|---|
| @affine/component | AFFiNE Component Resources |  |
| @toeverything/theme | AFFiNE theme |  |
Upstreams
We would also like to give thanks to open-source projects that make AFFiNE possible:
-
Blocksuite - 💠 BlockSuite is the open-source collaborative editor project behind AFFiNE.
-
y-octo - 🐙 y-octo is a native, high-performance, thread-safe YJS CRDT implementation, serving as the core engine enabling the AFFiNE Client/Server to achieve "local-first" functionality.
-
OctoBase - 🐙 OctoBase is the open-source database behind AFFiNE, local-first, yet collaborative. A light-weight, scalable, data engine written in Rust.
-
yjs - Fundamental support of CRDTs for our implementation on state management and data sync on web.
-
electron - Build cross-platform desktop apps with JavaScript, HTML, and CSS.
-
React - The library for web and native user interfaces.
-
napi-rs - A framework for building compiled Node.js add-ons in Rust via Node-API.
-
Jotai - Primitive and flexible state management for React.
-
async-call-rpc - A lightweight JSON RPC client & server.
-
Vite - Next generation frontend tooling.
-
Other upstream dependencies.
Thanks a lot to the community for providing such powerful and simple libraries, so that we can focus more on the implementation of the product logic, and we hope that in the future our projects will also provide a more easy-to-use knowledge base for everyone.
Contributors
We would like to express our gratitude to all the individuals who have already contributed to AFFiNE! If you have any AFFiNE-related project, documentation, tool or template, please feel free to contribute it by submitting a pull request to our curated list on GitHub: awesome-affine.
Self-Host
Begin with Docker to deploy your own feature-rich, unrestricted version of AFFiNE. Our team is diligently updating to the latest version. For more information on how to self-host AFFiNE, please refer to our documentation.
Feature Request
For feature requests, please see discussions.
Building
Codespaces
From the GitHub repo main page, click the green "Code" button and select "Create codespace on master". This will open a new Codespace with the (supposedly auto-forked AFFiNE repo cloned, built, and ready to go).
Local
See BUILDING.md for instructions on how to build AFFiNE from source code.
Contributing
We welcome contributions from everyone. See docs/contributing/tutorial.md for details.
License
Editions
-
AFFiNE Community Edition (CE) is the current available version, it's free for self-host under the MIT license.
-
AFFiNE Enterprise Edition (EE) is yet to be published, it will have more advanced features and enterprise-oriented offerings, including but not exclusive to rebranding and SSO, advanced admin and audit, etc., you may refer to https://affine.pro/pricing for more information
See LICENSE for details.