Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add remember me cookie assertions #97

Closed
wants to merge 4 commits into from
Closed

Add remember me cookie assertions #97

wants to merge 4 commits into from

Commits on Jun 12, 2024

  1. Remove extraneous check for request.local? 

    Closes stevepolitodesign#88.
    @mdchaney
    mdchaney committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    c4e6e7b View commit details
    Browse the repository at this point in the history

  2. Adds assertions for remember_me cookie. 

    Asserts cookie is http_only, secure, and same-site is "strict".
Closes stevepolitodesign#87.
    @mdchaney
    mdchaney committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    2e6e5b0 View commit details
    Browse the repository at this point in the history

Commits on Jun 14, 2024

  1. Adds security features to remember_token cookie. 

    1. Set to "secure" in production
2. Set to HttpOnly
3. SameSite set to strict.

Closes stevepolitodesign#87.
    @mdchaney
    mdchaney committed Jun 14, 2024
    Configuration menu
    Copy the full SHA
    ba52446 View commit details
    Browse the repository at this point in the history

  2. Undoing prior accidental commit.

    @mdchaney
    mdchaney committed Jun 14, 2024
    Configuration menu
    Copy the full SHA
    515871f View commit details
    Browse the repository at this point in the history