Fix secure cookies bug
This commit is contained in:
@@ -15,10 +15,13 @@ import grabMediaURL from "../media/grab-media-url";
|
||||
|
||||
type Params = {
|
||||
user_id: string | number;
|
||||
/** Set the Secure attribute only when served over HTTPS */
|
||||
secure?: boolean;
|
||||
};
|
||||
|
||||
export default async function loginUser({
|
||||
user_id,
|
||||
secure,
|
||||
}: Params): Promise<Response> {
|
||||
const now = Date.now();
|
||||
|
||||
@@ -103,11 +106,13 @@ export default async function loginUser({
|
||||
name: AppData["AuthKeyCookieName"],
|
||||
value: encrypted_key,
|
||||
maxAge,
|
||||
secure: secure ?? false,
|
||||
},
|
||||
{
|
||||
name: AppData["AuthCSRFCookieName"],
|
||||
value: csrf_key,
|
||||
maxAge,
|
||||
secure: secure ?? false,
|
||||
},
|
||||
]);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user