add comment about unsecure practice

This commit is contained in:
Torben Haack 2024-10-11 05:54:13 +02:00
parent b798040704
commit 13dcb81672

View File

@ -13,7 +13,7 @@ export async function GET(): Promise<Response> {
cookies().set("github_oauth_state", state, {
path: "/",
secure: false, //process.env.NODE_ENV === "production",
secure: false, //process.env.NODE_ENV === "production", -- can't be used until SSL certificate is provided by IT
httpOnly: true,
maxAge: ONE_HOUR,
sameSite: "lax",