Fix login failure over HTTP by disabling secure cookie flag by default
All checks were successful
Automated Container Build / build-and-push (push) Successful in 55s
All checks were successful
Automated Container Build / build-and-push (push) Successful in 55s
This commit is contained in:
parent
577a189e0b
commit
00eac1457c
1 changed files with 1 additions and 1 deletions
|
|
@ -9,7 +9,7 @@ const sessionOptions: SessionOptions = {
|
|||
password: process.env.SESSION_SECRET || "dev-session-secret-change-in-production-must-be-32-chars",
|
||||
cookieName: "study-app-session",
|
||||
cookieOptions: {
|
||||
secure: process.env.NODE_ENV === "production",
|
||||
secure: process.env.NODE_ENV === "production" && process.env.SECURE_COOKIES === "true",
|
||||
httpOnly: true,
|
||||
sameSite: "lax" as const,
|
||||
},
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue