make invitation expiration time configurable

[stefan0xC]

Add an option to configure the number of hours after which organization invites, emergency access invites, email verification emails and account deletion requests expire (defaults to 5 days or 120 hours and must be at least 1 hour).

[tessus]

Is there a reason why you go with hours as unit? I think days is granular enough. I doubt anyone would really set such a value in hours. e.g. who cares if it is 120h or 123h?

[stefan0xC]

Is there a reason why you go with hours as unit? I think days is granular enough. I doubt anyone would really set such a value in hours. e.g. who cares if it is 120h or 123h?

Yes. Self-hosted Bitwarden has hours as a unit. Cf. globalSettings__organizationInviteExpirationHours=

[tessus]

Thanks. Then it makes sense to be consistent.

However, I still find it puzzling why they went with this unit.

[beckerj]

However, I still find it puzzling why they went with this unit.

You are right, the difference between 120h and 132h probably doesn't matter at all.
The valid use case here is to set it to something less then 24h/1day, e.g. 1-2h in case you want to minimize the time that someone could potentially gain access to a valid link (email is unencrypted after all). 1-2h is enough time for most private installations where a "family-admin" guides you through the process anyways.