mirror of
https://github.com/zitadel/zitadel.git
synced 2025-08-12 15:07:32 +00:00
fix: enfore secure for production environments
This commit is contained in:
@@ -31,7 +31,8 @@ async function setSessionHttpOnlyCookie<T>(
|
|||||||
value: JSON.stringify(sessions),
|
value: JSON.stringify(sessions),
|
||||||
httpOnly: true,
|
httpOnly: true,
|
||||||
path: "/",
|
path: "/",
|
||||||
sameSite,
|
sameSite: process.env.NODE_ENV === "production" ? sameSite : "lax",
|
||||||
|
secure: process.env.NODE_ENV === "production",
|
||||||
});
|
});
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user