Fix login failure over HTTP by disabling secure cookie flag by default
All checks were successful
Automated Container Build / build-and-push (push) Successful in 55s

This commit is contained in:
Elijah 2026-06-27 20:21:20 -07:00
parent 577a189e0b
commit 00eac1457c

View file

@ -9,7 +9,7 @@ const sessionOptions: SessionOptions = {
password: process.env.SESSION_SECRET || "dev-session-secret-change-in-production-must-be-32-chars", password: process.env.SESSION_SECRET || "dev-session-secret-change-in-production-must-be-32-chars",
cookieName: "study-app-session", cookieName: "study-app-session",
cookieOptions: { cookieOptions: {
secure: process.env.NODE_ENV === "production", secure: process.env.NODE_ENV === "production" && process.env.SECURE_COOKIES === "true",
httpOnly: true, httpOnly: true,
sameSite: "lax" as const, sameSite: "lax" as const,
}, },