[web] Disable secure cookies

This commit is contained in:
orosmatthew 2023-10-15 15:00:32 -04:00
parent bb7168f522
commit 384bf03688

View File

@ -56,7 +56,8 @@ export async function attemptLogin(
if (user.passwordHash === hash.hash.toString()) {
const session = await db.session.create({ data: { userId: user.id } });
cookies.set('session', session.token, {
secure: process.env.NODE_ENV === 'development' ? false : true,
// secure: process.env.NODE_ENV === 'development' ? false : true,
secure: false,
httpOnly: true,
sameSite: 'strict',
maxAge: sessionExpireSeconds