Make session cookie HttpOnly and Secure

2022-11-01 17:59:18 -05:00
parent 967e918df1
commit 92529640d6
1 changed files with 6 additions and 4 deletions
--- a/database/models/user.go
+++ b/database/models/user.go
@@ -126,6 +126,8 @@ func createSessionCookie(app *app.App, w http.ResponseWriter, username string) (
 		Value:    token,
 		Path:     "/",
 		MaxAge:   86400,
+		HttpOnly: true,
+		Secure:   true,
 	}

 	http.SetCookie(w, cookie)