allow using auth without https

2026-04-23 17:28:53 +02:00 · 2025-02-18 04:15:47 +08:00
parent 8eef7db1c6
commit 0c112e1db1
2 changed files with 2 additions and 3 deletions
--- a/internal/api/v1/auth/oidc.go
+++ b/internal/api/v1/auth/oidc.go
@@ -162,7 +162,7 @@ func (auth *OIDCProvider) RedirectLoginPage(w http.ResponseWriter, r *http.Reque
 		MaxAge:   300,
 		HttpOnly: true,
 		SameSite: http.SameSiteLaxMode,
-		Secure:   true,
+		Secure:   r.TLS != nil,
 		Path:     "/",
 	})