[BUG] Use secure cookie #536

Closed
opened 2026-02-04 21:14:22 +03:00 by OVERLORD · 1 comment
Owner

Originally created by @bt90 on GitHub (Dec 30, 2022).

If the login is done over a secure HTTPS connection, the login cookie should have the Secure attribute set.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#restrict_access_to_cookies

Originally created by @bt90 on GitHub (Dec 30, 2022). If the login is done over a secure HTTPS connection, the login cookie should have the `Secure` attribute set. https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#restrict_access_to_cookies
Author
Owner

@bt90 commented on GitHub (Dec 30, 2022):

We should also specify SameSite=Strict

@bt90 commented on GitHub (Dec 30, 2022): We should also specify `SameSite=Strict`
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: immich-app/immich#536