botris.social/femto-backend
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

secure cookies fix

Browse source
This commit is contained in:
john 2025-05-20 11:02:54 +02:00
parent 6dfa49bd01
commit 88b8aa7429
4 changed files with 10 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

13
Femto.Api/Sessions/HttpContextSessionExtensions.cs
View file

@ -2,6 +2,7 @@ using System.Text.Json;
using System.Text.Json.Serialization;
using Femto.Api.Auth;
using Femto.Modules.Auth.Application.Dto;
using Microsoft.Extensions.Options;
namespace Femto.Api.Sessions;
@ -10,12 +11,12 @@ internal static class HttpContextSessionExtensions
public static void SetSession(
this HttpContext httpContext,
Session session,
UserInfo user,
CookieSettings cookieSettings
UserInfo user
)
{
var secure = cookieSettings.Secure;
var sameSite = cookieSettings.SameSite ? SameSiteMode.Strict : SameSiteMode.Unspecified;
var cookieSettings = httpContext.RequestServices.GetService<IOptions<CookieSettings>>();
var secure = cookieSettings?.Value.Secure ?? true;
var sameSite = secure ? SameSiteMode.None : SameSiteMode.Unspecified;
var expires = session.Expires;
httpContext.Response.Cookies.Append(
@ -42,8 +43,8 @@ internal static class HttpContextSessionExtensions
),
new CookieOptions
{
Secure = cookieSettings.Secure,
SameSite = cookieSettings.SameSite ? SameSiteMode.Strict : SameSiteMode.Unspecified,
Secure = secure,
SameSite = sameSite,
Expires = session.Expires,
}
);