summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorOmar Roth <omarroth@hotmail.com>2018-07-18 19:29:03 -0500
committerOmar Roth <omarroth@hotmail.com>2018-07-18 19:29:03 -0500
commit61e3c39ecde189634d6f89863538d72e612b25e9 (patch)
tree5aeb4c2400440800171cd9afd8b41ae22da5f4e4
parent68d5ee95b3075afb843c9332a7bb44c4b94dd4be (diff)
downloadinvidious-61e3c39ecde189634d6f89863538d72e612b25e9.tar.gz
invidious-61e3c39ecde189634d6f89863538d72e612b25e9.tar.bz2
invidious-61e3c39ecde189634d6f89863538d72e612b25e9.zip
Add 'secure' for cookies when SSL enabled
-rw-r--r--src/invidious.cr7
1 files changed, 6 insertions, 1 deletions
diff --git a/src/invidious.cr b/src/invidious.cr
index 39f8a2a8..fe205b53 100644
--- a/src/invidious.cr
+++ b/src/invidious.cr
@@ -663,7 +663,12 @@ post "/login" do |env|
host = URI.parse(env.request.headers["Host"]).host
login.cookies.each do |cookie|
- cookie.secure = false
+ if Kemal.config.ssl
+ cookie.secure = true
+ else
+ cookie.secure = false
+ end
+
cookie.extension = cookie.extension.not_nil!.gsub(".youtube.com", host)
cookie.extension = cookie.extension.not_nil!.gsub("Secure; ", "")
end