feat: add 'secureCookies' configuration variable to explicitly set the secure flag and prevent confusion

2024-11-14 17:31:17 +01:00
parent 77eef187b7
commit 4ce64206be
5 changed files with 10 additions and 3 deletions
--- a/backend/src/user/user.controller.ts
+++ b/backend/src/user/user.controller.ts
@@ -53,7 +53,7 @@ export class UserController {
    @GetUser() user: User,
    @Res({ passthrough: true }) response: Response,
  ) {
-    const isSecure = this.config.get("general.appUrl").startsWith("https");
+    const isSecure = this.config.get("general.secureCookies");

    response.cookie("access_token", "accessToken", {
      maxAge: -1,