Fix secure cookies bug

This commit is contained in:
2026-09-20 07:33:43 +01:00
parent 1490497517
commit 3d122036ce
3 changed files with 12 additions and 0 deletions
+5
View File
@@ -15,10 +15,13 @@ import grabMediaURL from "../media/grab-media-url";
type Params = {
user_id: string | number;
/** Set the Secure attribute only when served over HTTPS */
secure?: boolean;
};
export default async function loginUser({
user_id,
secure,
}: Params): Promise<Response> {
const now = Date.now();
@@ -103,11 +106,13 @@ export default async function loginUser({
name: AppData["AuthKeyCookieName"],
value: encrypted_key,
maxAge,
secure: secure ?? false,
},
{
name: AppData["AuthCSRFCookieName"],
value: csrf_key,
maxAge,
secure: secure ?? false,
},
]);