From 615b54ec4f12c79d4ced3c13eb159411087ed510 Mon Sep 17 00:00:00 2001 From: Nicolai Ort Date: Sat, 12 Dec 2020 19:13:18 +0100 Subject: [PATCH] Removed secure flag and added expiry basd on ht refresh token ref#25 --- src/controllers/AuthController.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/controllers/AuthController.ts b/src/controllers/AuthController.ts index dfd0a3c..467e64a 100644 --- a/src/controllers/AuthController.ts +++ b/src/controllers/AuthController.ts @@ -25,8 +25,8 @@ export class AuthController { let auth; try { auth = await createAuth.toAuth(); - response.cookie('lfk_backend__refresh_token', auth.refresh_token, { maxAge: 900000, httpOnly: true, secure: true }); - response.cookie('lfk_backend__refresh_token_expires_at', auth.refresh_token_expires_at, { maxAge: 900000, httpOnly: true, secure: true }); + response.cookie('lfk_backend__refresh_token', auth.refresh_token, { expires: new Date(auth.refresh_token_expires_at * 1000), httpOnly: true }); + response.cookie('lfk_backend__refresh_token_expires_at', auth.refresh_token_expires_at, { expires: new Date(auth.refresh_token_expires_at * 1000), httpOnly: true }); return response.send(auth) } catch (error) { throw error;