diff --git a/pkg/api/console/v1/cookie.go b/pkg/api/console/v1/cookie.go index 60643cbf3..775c1a16a 100644 --- a/pkg/api/console/v1/cookie.go +++ b/pkg/api/console/v1/cookie.go @@ -6,9 +6,12 @@ import ( // setSessionCookie sets a session cookie in the response func setSessionCookie(w http.ResponseWriter, sessionID string, cfg AuthConfig) { + // Sign the session ID + signedValue := signCookieValue(sessionID, cfg.CookieSecret) + cookie := &http.Cookie{ Name: cfg.CookieName, - Value: sessionID, + Value: signedValue, Path: cfg.CookiePath, Domain: cfg.CookieDomain, Secure: cfg.CookieSecure,