Skip to content

Commit da9b2c8

Browse files
committed
fix: update secure cookie handling to use request scheme in chat and login endpoints
1 parent f31aac5 commit da9b2c8

2 files changed

Lines changed: 2 additions & 4 deletions

File tree

‎apps/chat/views/chat.py‎

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -116,14 +116,13 @@ def post(self, request: Request):
116116
"Access-Control-Allow-Methods": "POST",
117117
"Access-Control-Allow-Headers": "Origin,Content-Type,Cookie,Accept,Token"}
118118
)
119-
secure = request.is_secure()
120119
response.set_cookie(
121120
'mk_file_auth',
122121
value=f_token,
123122
max_age=7 * 24 * 3600,
124123
path=f'{CONFIG.get_chat_path()}/{request.data.get("access_token")}',
125124
domain=None,
126-
secure=secure,
125+
secure=request.scheme == "https",
127126
httponly=True,
128127
samesite="None",
129128
)

‎apps/users/views/login.py‎

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -48,14 +48,13 @@ class LoginView(APIView):
4848
def post(self, request: Request):
4949
token, f_token = LoginSerializer().login(request.data)
5050
response = result.success(token)
51-
secure = request.is_secure()
5251
response.set_cookie(
5352
'mk_file_auth',
5453
value=f_token,
5554
max_age=7 * 24 * 3600,
5655
path=f'{CONFIG.get_admin_path()}',
5756
domain=None,
58-
secure=secure,
57+
secure=request.scheme == "https",
5958
httponly=True,
6059
samesite="None",
6160
)

0 commit comments

Comments
 (0)