add comment about unsecure practice
This commit is contained in:
parent
b798040704
commit
13dcb81672
@ -13,7 +13,7 @@ export async function GET(): Promise<Response> {
|
|||||||
|
|
||||||
cookies().set("github_oauth_state", state, {
|
cookies().set("github_oauth_state", state, {
|
||||||
path: "/",
|
path: "/",
|
||||||
secure: false, //process.env.NODE_ENV === "production",
|
secure: false, //process.env.NODE_ENV === "production", -- can't be used until SSL certificate is provided by IT
|
||||||
httpOnly: true,
|
httpOnly: true,
|
||||||
maxAge: ONE_HOUR,
|
maxAge: ONE_HOUR,
|
||||||
sameSite: "lax",
|
sameSite: "lax",
|
||||||
|
Loading…
x
Reference in New Issue
Block a user