Merge pull request #3905 from camptocamp/secure-cookie

Send cookies only on https
camptocamp · Jul 24, 2018 · 26f2b51 · 26f2b51
2 parents d2f284c + 3ff0af7
commit 26f2b51
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/geoportal/c2cgeoportal_geoportal/lib/authentication.py b/geoportal/c2cgeoportal_geoportal/lib/authentication.py
@@ -45,7 +45,7 @@ def create_authentication(settings):
         callback=defaultgroupsfinder,
         cookie_name=settings["authtkt_cookie_name"],
         timeout=timeout, max_age=timeout, reissue_time=reissue_time,
-        hashalg="sha512", http_only=True
+        hashalg="sha512", http_only=True, secure=True,
     )
     basic_authentication_policy = BasicAuthAuthenticationPolicy(c2cgeoportal_check)
     policies = [cookie_authentication_policy, basic_authentication_policy]