chore: Use httpOnly authentication cookie (#5552)

2023-07-15 16:56:32 -04:00
parent b1230d0c81
commit 39e12cef65
16 changed files with 114 additions and 120 deletions
--- a/server/routes/auth/index.ts
+++ b/server/routes/auth/index.ts
@@ -32,7 +32,6 @@ router.get("/redirect", auth(), async (ctx: APIContext) => {
  await user.updateActiveAt(ctx, true);

  ctx.cookies.set("accessToken", jwtToken, {
-    httpOnly: false,
    sameSite: "lax",
    expires: addMonths(new Date(), 3),
  });