Clarify Set-Cookie syntax

This commit is contained in:
Alexandre Aubin 2018-11-19 16:03:35 +00:00
parent 5f21d3f630
commit 2699aa8db7

View file

@ -145,10 +145,10 @@ function set_auth_cookie(user, domain)
"|"..session_key) "|"..session_key)
local cookie_str = "; Domain=."..domain.. local cookie_str = "; Domain=."..domain..
"; Path=/".. "; Path=/"..
"; Expires="..os.date("%a, %d %b %Y %X UTC;", expire).. "; Expires="..os.date("%a, %d %b %Y %X UTC", expire)..
"; Secure".. "; Secure"..
"; HttpOnly".. "; HttpOnly"..
"; SameSite=Strict" "; SameSite=Strict ;;"
ngx.header["Set-Cookie"] = { ngx.header["Set-Cookie"] = {
"SSOwAuthUser="..user..cookie_str, "SSOwAuthUser="..user..cookie_str,
@ -162,14 +162,14 @@ end
function delete_cookie() function delete_cookie()
conf = config.get_config() conf = config.get_config()
local expired_time = "Thu, 01 Jan 1970 00:00:00 UTC;" local expired_time = "Thu, 01 Jan 1970 00:00:00 UTC"
for _, domain in ipairs(conf["domains"]) do for _, domain in ipairs(conf["domains"]) do
local cookie_str = "; Domain=."..domain.. local cookie_str = "; Domain=."..domain..
"; Path=/".. "; Path=/"..
"; Expires="..expired_time.. "; Expires="..expired_time..
"; Secure".. "; Secure"..
"; HttpOnly".. "; HttpOnly"..
"; SameSite=Strict" "; SameSite=Strict ;;"
ngx.header["Set-Cookie"] = { ngx.header["Set-Cookie"] = {
"SSOwAuthUser="..cookie_str, "SSOwAuthUser="..cookie_str,
"SSOwAuthHash="..cookie_str, "SSOwAuthHash="..cookie_str,
@ -181,12 +181,12 @@ end
-- Expires the redirection cookie -- Expires the redirection cookie
function delete_redirect_cookie() function delete_redirect_cookie()
local expired_time = "Thu, 01 Jan 1970 00:00:00 UTC;" local expired_time = "Thu, 01 Jan 1970 00:00:00 UTC"
local cookie_str = "; Path="..conf["portal_path"].. local cookie_str = "; Path="..conf["portal_path"]..
"; Expires="..expired_time.. "; Expires="..expired_time..
"; Secure".. "; Secure"..
"; HttpOnly".. "; HttpOnly"..
"; SameSite=Strict" "; SameSite=Strict ;;"
ngx.header["Set-Cookie"] = "SSOwAuthRedirect=;" ..cookie_str ngx.header["Set-Cookie"] = "SSOwAuthRedirect=;" ..cookie_str
end end