Updates

package-shared/actions/users/login-user.ts

@@ -36,6 +36,7 @@ type Param = {
     apiUserID?: string | number;
     dbUserId?: string | number;
     cleanupTokens?: boolean;
+    secureCookie?: boolean;
 };
 
 /**
@@ -60,6 +61,7 @@ export default async function loginUser({
     dbUserId,
     debug,
     cleanupTokens,
+    secureCookie,
 }: Param): Promise<APILoginFunctionReturn> {
     const grabedHostNames = grabHostNames({ userId: user_id || apiUserID });
     const { host, port, scheme } = grabedHostNames;
@@ -266,7 +268,9 @@ export default async function loginUser({
         }
 
         response?.setHeader("Set-Cookie", [
-            `${authKeyName}=${encryptedPayload};samesite=strict;path=/;HttpOnly=true;Secure=true`,
+            `${authKeyName}=${encryptedPayload};samesite=strict;path=/;HttpOnly=true${
+                secureCookie ? ";Secure=true" : ""
+            }`,
             `${csrfName}=${httpResponse.payload?.csrf_k};samesite=strict;path=/;HttpOnly=true`,
         ]);
 

package-shared/actions/users/reauth-user.ts

@@ -25,6 +25,7 @@ type Param = {
     additionalFields?: string[];
     encryptedUserString?: string;
     user_id?: string | number;
+    secureCookie?: boolean;
 };
 
 /**
@@ -41,6 +42,7 @@ export default async function reauthUser({
     additionalFields,
     encryptedUserString,
     user_id,
+    secureCookie,
 }: Param): Promise<APILoginFunctionReturn> {
     /**
      * Check Encryption Keys
@@ -188,7 +190,9 @@ export default async function reauthUser({
         const csrfName = cookieNames.csrfCookieName;
 
         response?.setHeader("Set-Cookie", [
-            `${authKeyName}=${encryptedPayload};samesite=strict;path=/;HttpOnly=true;Secure=true`,
+            `${authKeyName}=${encryptedPayload};samesite=strict;path=/;HttpOnly=true${
+                secureCookie ? ";Secure=true" : ""
+            }`,
             `${csrfName}=${httpResponse.payload?.csrf_k};samesite=strict;path=/;HttpOnly=true`,
         ]);
 

package-shared/actions/users/social/github-auth.ts

@@ -31,6 +31,7 @@ type Param = {
     additionalFields?: string[];
     additionalData?: { [s: string]: string | number };
     user_id?: boolean;
+    secureCookie?: boolean;
 };
 
 /**
@@ -49,6 +50,7 @@ export default async function githubAuth({
     additionalFields,
     user_id,
     additionalData,
+    secureCookie,
 }: Param): Promise<FunctionReturn | undefined> {
     /**
      * Check inputs
@@ -228,10 +230,10 @@ export default async function githubAuth({
         const csrfName = `datasquirel_${dsqlUserId}_${database}_csrf`;
 
         response.setHeader("Set-Cookie", [
-            `${authKeyName}=${encryptedPayload};samesite=strict;path=/;HttpOnly=true;Secure=true`,
+            `${authKeyName}=${encryptedPayload};samesite=strict;path=/;HttpOnly=true${
+                secureCookie ? ";Secure=true" : ""
+            }`,
             `${csrfName}=${user.csrf_k};samesite=strict;path=/;HttpOnly=true`,
-            `dsqluid=${dsqlUserId};samesite=strict;path=/;HttpOnly=true`,
-            `datasquirel_social_id=${user.social_id};samesite=strict;path=/`,
         ]);
     }
 

package-shared/actions/users/social/google-auth.ts

@@ -17,6 +17,7 @@ type Param = {
     additionalData?: { [s: string]: string | number };
     apiUserID?: string | number;
     debug?: boolean;
+    secureCookie?: boolean;
 };
 
 /**
@@ -33,6 +34,7 @@ export default async function googleAuth({
     additionalData,
     apiUserID,
     debug,
+    secureCookie,
 }: Param): Promise<APILoginFunctionReturn> {
     const grabedHostNames = grabHostNames({
         userId: apiUserID || process.env.DSQL_API_USER_ID,
@@ -192,7 +194,9 @@ export default async function googleAuth({
         const csrfName = cookieNames.csrfCookieName;
 
         response?.setHeader("Set-Cookie", [
-            `${authKeyName}=${encryptedPayload};samesite=strict;path=/;HttpOnly=true;Secure=true`,
+            `${authKeyName}=${encryptedPayload};samesite=strict;path=/;HttpOnly=true${
+                secureCookie ? ";Secure=true" : ""
+            }`,
             `${csrfName}=${httpResponse.payload?.csrf_k};samesite=strict;path=/;HttpOnly=true`,
         ]);
     }