synced/coder
1
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2025-07-06 15:41:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: Add strict transport security and secure cookie options (#741)

Browse Source
This commit is contained in:
Garrett Delfosse
2022-03-31 12:31:06 -05:00
committed by GitHub
parent bb6c12ddd4
commit 0d53795c0d
3 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
coderd/coderd.go
View File

@ -29,6 +29,8 @@ type Options struct {
AWSCertificates awsidentity.Certificates
GoogleTokenValidator *idtoken.Validator
SecureAuthCookie bool
}
// New constructs the Coder API into an HTTP handler.

1
coderd/users.go
View File

@ -417,6 +417,7 @@ func (api *api) postLogin(rw http.ResponseWriter, r *http.Request) {
Path: "/",
HttpOnly: true,
SameSite: http.SameSiteLaxMode,
Secure: api.SecureAuthCookie,
})
render.Status(r, http.StatusCreated)