michael/scrypted
1
0
Fork 0
mirror of https://github.com/koush/scrypted.git synced 2026-02-13 02:12:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

server: fix insecure http login

Browse Source
This commit is contained in:
Koushik Dutta
2022-06-12 10:33:22 -07:00
parent 962168a285
commit 603f384189
3 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
server/package-lock.json generated
View File

@@ -1,12 +1,12 @@
{
"name": "@scrypted/server",
"version": "0.1.2",
"version": "0.1.4",
"lockfileVersion": 2,
"requires": true,
"packages": {
"": {
"name": "@scrypted/server",
"version": "0.1.2",
"version": "0.1.4",
"license": "ISC",
"dependencies": {
"@mapbox/node-pre-gyp": "^1.0.8",

2
server/package.json
View File

@@ -1,6 +1,6 @@
{
"name": "@scrypted/server",
"version": "0.1.2",
"version": "0.1.4",
"description": "",
"dependencies": {
"@mapbox/node-pre-gyp": "^1.0.8",

6
server/src/scrypted-server-main.ts
View File

@@ -400,7 +400,8 @@ async function start() {
const login_user_token = `${username}#${timestamp}`;
res.cookie('login_user_token', login_user_token, {
maxAge,
secure: true,
// enabling this will disable insecure http login...
// secure: true,
signed: true,
httpOnly: true,
sameSite: 'none',
@@ -442,7 +443,8 @@ async function start() {
const login_user_token = `${username}#${timestamp}`
res.cookie('login_user_token', login_user_token, {
maxAge,
secure: true,
// enabling this will disable insecure http login...
// secure: true,
signed: true,
httpOnly: true,
sameSite: 'none',