TheAnachronism/docspell
1
0
Fork 0
mirror of https://github.com/TheAnachronism/docspell.git synced 2025-06-22 10:28:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Set samesite=strict for all cookies

Browse Source
This commit is contained in:
eikek
2022-02-27 22:57:31 +01:00
parent aa7fd5d504
commit f22f0150e8
3 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
modules/restserver/src/main/scala/docspell/restserver/auth/CookieData.scala
View File

@ -26,7 +26,8 @@ case class CookieData(auth: AuthToken) {
domain = None, domain = None,
path = Some(path.asString), path = Some(path.asString),
httpOnly = true, httpOnly = true,
secure = sec secure = sec,
sameSite = Some(SameSite.Strict)
) )
} }

3
modules/restserver/src/main/scala/docspell/restserver/auth/RememberCookieData.scala
View File

@ -24,7 +24,8 @@ case class RememberCookieData(token: RememberToken) {
path = Some(path.asString), path = Some(path.asString),
httpOnly = true, httpOnly = true,
secure = sec, secure = sec,
maxAge = Some(config.valid.seconds) maxAge = Some(config.valid.seconds),
sameSite = Some(SameSite.Strict)
) )
} }

3
modules/restserver/src/main/scala/docspell/restserver/auth/ShareCookieData.scala
View File

@ -26,7 +26,8 @@ final case class ShareCookieData(token: ShareToken) {
httpOnly = true, httpOnly = true,
secure = sec, secure = sec,
maxAge = None, maxAge = None,
expires = None expires = None,
sameSite = Some(SameSite.Strict)
) )
} }