feat: add 'secureCookies' configuration variable to explicitly set the secure flag and prevent confusion

2024-11-14 17:31:17 +01:00
parent 77eef187b7
commit 4ce64206be
5 changed files with 10 additions and 3 deletions
--- a/backend/src/auth/auth.controller.ts
+++ b/backend/src/auth/auth.controller.ts
@@ -176,7 +176,7 @@ export class AuthController {
      request.cookies.access_token,
    );

-    const isSecure = this.config.get("general.appUrl").startsWith("https");
+    const isSecure = this.config.get("general.secureCookies");
    response.cookie("access_token", "", {
      maxAge: -1,
      secure: isSecure,