YunoHost/SSOwat
1
0
Fork 0
mirror of https://github.com/YunoHost/SSOwat.git synced 2024-09-03 20:06:27 +02:00
Code Issues Projects Releases Packages Wiki Activity

[enh] Add 'Secure' flag in cookies.

Browse source
This commit is contained in:
opi 2017-02-28 15:36:04 +01:00
parent a2af42144b
commit 2eb38d3eaa
1 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
helpers.lua
View file

@ -117,7 +117,8 @@ function set_auth_cookie(user, domain)
"|"..session_key)
local cookie_str = "; Domain=."..domain..
"; Path=/"..
"; Expires="..os.date("%a, %d %b %Y %X UTC;", expire)
"; Expires="..os.date("%a, %d %b %Y %X UTC;", expire)..
"; Secure"
ngx.header["Set-Cookie"] = {
"SSOwAuthUser="..user..cookie_str,
@ -135,7 +136,8 @@ function delete_cookie()
for _, domain in ipairs(conf["domains"]) do
local cookie_str = "; Domain=."..domain..
"; Path=/"..
"; Expires="..expired_time
"; Expires="..expired_time..
"; Secure"
ngx.header["Set-Cookie"] = {
"SSOwAuthUser="..cookie_str,
"SSOwAuthHash="..cookie_str,
@ -149,7 +151,8 @@ end
function delete_redirect_cookie()
expired_time = "Thu, 01 Jan 1970 00:00:00 UTC;"
local cookie_str = "; Path="..conf["portal_path"]..
"; Expires="..expired_time
"; Expires="..expired_time..
"; Secure"
ngx.header["Set-Cookie"] = "SSOwAuthRedirect=;" ..cookie_str
end