chore: cookies with "secure" flag (only transmitted through https)

2024-07-03 11:04:16 +02:00 · 2024-07-03 11:04:16 +02:00 · 1eb0bdb4ae
commit 1eb0bdb4ae
parent b3ccfc16c4
6 changed files with 10 additions and 7 deletions
--- a/app/models/concerns/trusted_device_concern.rb
+++ b/app/models/concerns/trusted_device_concern.rb
@ -8,7 +8,8 @@ module TrustedDeviceConcern
    cookies.encrypted[TRUSTED_DEVICE_COOKIE_NAME] = {
      value: JSON.generate({ created_at: start_at }),
      expires: start_at + TRUSTED_DEVICE_PERIOD,
-      httponly: true
+      httponly: true,
+      secure: Rails.env.production?
    }
  end