Fix login failure over HTTP by disabling secure cookie flag by default
All checks were successful
Automated Container Build / build-and-push (push) Successful in 55s
All checks were successful
Automated Container Build / build-and-push (push) Successful in 55s
This commit is contained in:
parent
577a189e0b
commit
00eac1457c
1 changed files with 1 additions and 1 deletions
|
|
@ -9,7 +9,7 @@ const sessionOptions: SessionOptions = {
|
||||||
password: process.env.SESSION_SECRET || "dev-session-secret-change-in-production-must-be-32-chars",
|
password: process.env.SESSION_SECRET || "dev-session-secret-change-in-production-must-be-32-chars",
|
||||||
cookieName: "study-app-session",
|
cookieName: "study-app-session",
|
||||||
cookieOptions: {
|
cookieOptions: {
|
||||||
secure: process.env.NODE_ENV === "production",
|
secure: process.env.NODE_ENV === "production" && process.env.SECURE_COOKIES === "true",
|
||||||
httpOnly: true,
|
httpOnly: true,
|
||||||
sameSite: "lax" as const,
|
sameSite: "lax" as const,
|
||||||
},
|
},
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue