Fix cookie secure flag for HTTP deployments

This commit is contained in:
Your Name
2026-07-18 21:49:46 +05:00
parent 765df4828b
commit baf0e858aa
+3 -3
View File
@@ -1733,8 +1733,8 @@ async def vk_poster_oauth_start(request: Request) -> RedirectResponse:
"v": "5.199", "v": "5.199",
} }
response = RedirectResponse(f"https://id.vk.ru/authorize?{urlencode(params)}") response = RedirectResponse(f"https://id.vk.ru/authorize?{urlencode(params)}")
response.set_cookie(VK_OAUTH_VERIFIER_COOKIE, verifier, httponly=True, secure=True, samesite="lax", max_age=15 * 60) response.set_cookie(VK_OAUTH_VERIFIER_COOKIE, verifier, httponly=True, secure=(request.url.scheme == "https"), samesite="lax", max_age=15 * 60)
response.set_cookie(VK_OAUTH_STATE_COOKIE, state, httponly=True, secure=True, samesite="lax", max_age=15 * 60) response.set_cookie(VK_OAUTH_STATE_COOKIE, state, httponly=True, secure=(request.url.scheme == "https"), samesite="lax", max_age=15 * 60)
return response return response
@@ -1947,7 +1947,7 @@ async def login_post(request: Request, login: str = Form(...), password: str = F
) )
await audit(row["id"], "auth.login_success", "admin_user", int(row["id"]), {"login": login_value}, request) await audit(row["id"], "auth.login_success", "admin_user", int(row["id"]), {"login": login_value}, request)
response = redirect("/sources") response = redirect("/sources")
response.set_cookie(COOKIE_NAME, token, httponly=True, secure=True, samesite="lax", max_age=14 * 24 * 3600) response.set_cookie(COOKIE_NAME, token, httponly=True, secure=(request.url.scheme == "https"), samesite="lax", max_age=14 * 24 * 3600)
return response return response