WIP session refactor

authcookie use path and put the directory separator before in path
vincent-peugnet · Dec 24, 2023 · 1664d3b · 1664d3b
1 parent 50922a2
commit 1664d3b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/app/class/Modelconnect.php b/app/class/Modelconnect.php
@@ -24,7 +24,7 @@ public function createauthcookie(string $userid, string $wsession, int $conserva
             throw new RuntimeException("Secret Key not set");
         }
         $jwt = JWT::encode($datas, Config::secretkey());
-        $cookie = setcookie('authtoken', $jwt, time() + $conservation * 24 * 3600, "", "", false, true);
+        $cookie = setcookie('authtoken', $jwt, time() + $conservation * 24 * 3600, '/' . Config::basepath(), "", false, true);
         if (!$cookie) {
             throw new RuntimeException("Cant be send");
         }

diff --git a/index.php b/index.php
@@ -11,7 +11,7 @@
 $app = new Wcms\Application();
 $app->wakeup();
 
-session_set_cookie_params(['path' => Wcms\Config::basepath() . '/']);
+session_set_cookie_params(['path' => '/' . Wcms\Config::basepath()]);
 session_start();
 
 if (class_exists('Whoops\Run') && !empty(Wcms\Config::debug())) {