feat: securing the cookies

This commit is contained in:
efim
2023-10-09 04:22:09 +00:00
parent e4c79b2155
commit 2a3d00839f
3 changed files with 22 additions and 7 deletions

View File

@@ -212,7 +212,7 @@ https://github.com/efim/dotfiles/commit/b3695148082d8c9850a781aaa7a88920bdb1fa7f
this is all that's needed to enable tls
mind blown
** TODO somehow set cookie to httpOnly & secure
** DONE somehow set cookie to httpOnly & secure
with ability to disable for development session
** TODO maybe add middleware so that 401 would be a page, and not json