feat: update cookie security settings to use API_JWT_SECURE environment variable

2026-04-24 09:18:31 +02:00 · 2025-03-28 08:51:45 +08:00
parent 2da7ea56d5
commit f966ca8b83
3 changed files with 5 additions and 2 deletions
--- a/internal/api/v1/auth/oidc.go
+++ b/internal/api/v1/auth/oidc.go
@@ -197,7 +197,7 @@ func (auth *OIDCProvider) RedirectLoginPage(w http.ResponseWriter, r *http.Reque
 		MaxAge:   300,
 		HttpOnly: true,
 		SameSite: http.SameSiteLaxMode,
-		Secure:   r.TLS != nil,
+		Secure:   common.APIJWTSecure,
 		Path:     "/",
 	})