Add sameSite attribute to cookies

This commit is contained in:
nemunaire 2020-09-13 16:36:07 +02:00
parent 4619e2356a
commit 1d8c4a375c

View File

@ -26,6 +26,7 @@ func logout(w http.ResponseWriter, ps httprouter.Params, body []byte) HTTPRespon
Expires: time.Unix(0, 0), Expires: time.Unix(0, 0),
Secure: true, Secure: true,
HttpOnly: true, HttpOnly: true,
SameSite: http.SameSiteStrictMode,
}) })
return APIResponse{true} return APIResponse{true}
@ -58,8 +59,9 @@ func completeAuth(w http.ResponseWriter, username string, email string, firstnam
Value: base64.StdEncoding.EncodeToString(session.Id), Value: base64.StdEncoding.EncodeToString(session.Id),
Path: baseURL + "/", Path: baseURL + "/",
Expires: time.Now().Add(30 * 24 * time.Hour), Expires: time.Now().Add(30 * 24 * time.Hour),
//Secure: true, Secure: true,
HttpOnly: true, HttpOnly: true,
SameSite: http.SameSiteStrictMode,
}) })
return nil return nil