add comment about unsecure practice
This commit is contained in:
parent
b798040704
commit
13dcb81672
@ -13,7 +13,7 @@ export async function GET(): Promise<Response> {
|
||||
|
||||
cookies().set("github_oauth_state", state, {
|
||||
path: "/",
|
||||
secure: false, //process.env.NODE_ENV === "production",
|
||||
secure: false, //process.env.NODE_ENV === "production", -- can't be used until SSL certificate is provided by IT
|
||||
httpOnly: true,
|
||||
maxAge: ONE_HOUR,
|
||||
sameSite: "lax",
|
||||
|
Loading…
x
Reference in New Issue
Block a user