rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Make secure cookie configurable

Browse Source 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
This commit is contained in:
Sacha Al Himdani
2025-11-04 17:09:51 +01:00
parent 549775fd71
commit fee5a9232e
20 changed files with 94 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
docs/CONFIGURATION.md
View File

@@ -363,6 +363,12 @@ Secret key used for signing session cookies. Should be at least 32 bytes for sec
Session cookie lifetime in hours.
#### `auth.cookie.secure` (boolean)
**Default**: `true`
Controls whether the Secure flag is set on session cookies. When true, cookies are only sent over HTTPS connections.
#### `auth.password.pepper` (string)
**Default**: Auto-generated

1
docs/DOCKER_ENVIRONMENT_VARIABLES.md
View File

@@ -68,6 +68,7 @@ This document provides a comprehensive reference for all environment variables u
| `AUTH_COOKIE_DOMAIN` | Domain for the session cookie | `localhost` | No |
| `AUTH_COOKIE_SECRET` | Secret key for signing session cookies (32+ bytes) | - | **Yes** |
| `AUTH_COOKIE_DURATION` | Session cookie validity duration in hours | `24` | No |
| `AUTH_COOKIE_SECURE` | Set Secure flag on cookies (use false for HTTP) | `true` | No |
### Password Security