chore: Use httpOnly authentication cookie (#5552)

2023-07-15 16:56:32 -04:00
parent b1230d0c81
commit 39e12cef65
16 changed files with 114 additions and 120 deletions
--- a/server/utils/authentication.ts
+++ b/server/utils/authentication.ts
@@ -118,9 +118,8 @@ export async function signIn(
      );
    }
  } else {
-    ctx.cookies.set("accessToken", user.getJwtToken(), {
+    ctx.cookies.set("accessToken", user.getJwtToken(expires), {
      sameSite: "lax",
-      httpOnly: false,
      expires,
    });