fix: secure session cookie (#2308)

3 years ago · 7f330aff2e
parent 88a8c1aa59
commit 7f330aff2e
1 changed files with 3 additions and 0 deletions
--- a/server/index.ts
+++ b/server/index.ts
@ -139,6 +139,9 @@ app
        saveUninitialized: false,
        cookie: {
          maxAge: 1000 * 60 * 60 * 24 * 30,
+          httpOnly: true,
+          sameSite: true,
+          secure: 'auto',
        },
        store: new TypeormStore({
          cleanupLimit: 2,