Fix cookie secure flag for HTTP deployments
This commit is contained in:
@@ -1733,8 +1733,8 @@ async def vk_poster_oauth_start(request: Request) -> RedirectResponse:
|
|||||||
"v": "5.199",
|
"v": "5.199",
|
||||||
}
|
}
|
||||||
response = RedirectResponse(f"https://id.vk.ru/authorize?{urlencode(params)}")
|
response = RedirectResponse(f"https://id.vk.ru/authorize?{urlencode(params)}")
|
||||||
response.set_cookie(VK_OAUTH_VERIFIER_COOKIE, verifier, httponly=True, secure=True, samesite="lax", max_age=15 * 60)
|
response.set_cookie(VK_OAUTH_VERIFIER_COOKIE, verifier, httponly=True, secure=(request.url.scheme == "https"), samesite="lax", max_age=15 * 60)
|
||||||
response.set_cookie(VK_OAUTH_STATE_COOKIE, state, httponly=True, secure=True, samesite="lax", max_age=15 * 60)
|
response.set_cookie(VK_OAUTH_STATE_COOKIE, state, httponly=True, secure=(request.url.scheme == "https"), samesite="lax", max_age=15 * 60)
|
||||||
return response
|
return response
|
||||||
|
|
||||||
|
|
||||||
@@ -1947,7 +1947,7 @@ async def login_post(request: Request, login: str = Form(...), password: str = F
|
|||||||
)
|
)
|
||||||
await audit(row["id"], "auth.login_success", "admin_user", int(row["id"]), {"login": login_value}, request)
|
await audit(row["id"], "auth.login_success", "admin_user", int(row["id"]), {"login": login_value}, request)
|
||||||
response = redirect("/sources")
|
response = redirect("/sources")
|
||||||
response.set_cookie(COOKIE_NAME, token, httponly=True, secure=True, samesite="lax", max_age=14 * 24 * 3600)
|
response.set_cookie(COOKIE_NAME, token, httponly=True, secure=(request.url.scheme == "https"), samesite="lax", max_age=14 * 24 * 3600)
|
||||||
return response
|
return response
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user