diff --git a/Femto.Api/Sessions/HttpContextSessionExtensions.cs b/Femto.Api/Sessions/HttpContextSessionExtensions.cs index 713f7da..e017441 100644 --- a/Femto.Api/Sessions/HttpContextSessionExtensions.cs +++ b/Femto.Api/Sessions/HttpContextSessionExtensions.cs @@ -11,11 +11,21 @@ internal static class HttpContextSessionExtensions public static void SetSession(this HttpContext httpContext, Session session, UserInfo user) { var cookieSettings = httpContext.RequestServices.GetService>(); + var logger = httpContext.RequestServices.GetRequiredService>(); + var secure = cookieSettings?.Value.Secure ?? true; var sameSite = secure ? SameSiteMode.None : SameSiteMode.Unspecified; var domain = cookieSettings?.Value.Domain; var expires = session.Expires; + logger.LogDebug( + "cookie settings: Secure={Secure}, SameSite={SameSite}, domain={Domain}, Expires={Expires}", + secure, + sameSite, + domain, + expires + ); + httpContext.Response.Cookies.Append( "session", session.SessionId,