From 0e003d2dc4140f9200cb0d8906a7dcd77db53d50 Mon Sep 17 00:00:00 2001 From: Nicolai Ort Date: Sat, 12 Dec 2020 18:32:48 +0100 Subject: [PATCH] Set cookies to secure ref #25 --- src/controllers/AuthController.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/controllers/AuthController.ts b/src/controllers/AuthController.ts index 1d7418a..cab00a6 100644 --- a/src/controllers/AuthController.ts +++ b/src/controllers/AuthController.ts @@ -25,8 +25,8 @@ export class AuthController { let auth; try { auth = await createAuth.toAuth(); - response.cookie('lfk_backend__refresh_token', auth.refresh_token, { maxAge: 900000, httpOnly: true }); - response.cookie('lfk_backend__refresh_token_expires_at', auth.refresh_token_expires_at, { maxAge: 900000, httpOnly: true }); + response.cookie('lfk_backend__refresh_token', auth.refresh_token, { maxAge: 900000, httpOnly: true, secure: true }); + response.cookie('lfk_backend__refresh_token_expires_at', auth.refresh_token_expires_at, { maxAge: 900000, httpOnly: true, secure: true }); return response.send(auth) } catch (error) { throw error;