Kiu/Semaphore
Kiu/Semaphore
1
0
Fork 0
mirror of https://github.com/semaphoreui/semaphore.git synced 2025-01-20 07:19:20 +01:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

feat(be): http only for cookies

Browse Source
This commit is contained in:
Denis Gukov 2024-12-21 00:51:11 +05:00
parent 35e886b436
commit 834f75bac0
No known key found for this signature in database
GPG Key ID: 044381366A5D4731
1 changed files with 12 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
api/login.go
View File

@ -16,13 +16,13 @@ import (
"text/template"
"time"
"github.com/coreos/go-oidc/v3/oidc"
"github.com/go-ldap/ldap/v3"
"github.com/gorilla/mux"
"github.com/semaphoreui/semaphore/api/helpers"
"github.com/semaphoreui/semaphore/db"
"github.com/semaphoreui/semaphore/pkg/random"
"github.com/semaphoreui/semaphore/util"
"github.com/coreos/go-oidc/v3/oidc"
"github.com/go-ldap/ldap/v3"
"github.com/gorilla/mux"
log "github.com/sirupsen/logrus"
"golang.org/x/crypto/bcrypt"
"golang.org/x/oauth2"
@ -171,9 +171,10 @@ func createSession(w http.ResponseWriter, r *http.Request, user db.User) {
}
http.SetCookie(w, &http.Cookie{
Name: "semaphore",
Value: encoded,
Path: "/",
Name: "semaphore",
Value: encoded,
Path: "/",
HttpOnly: true,
})
}
@ -317,10 +318,11 @@ func login(w http.ResponseWriter, r *http.Request) {
func logout(w http.ResponseWriter, r *http.Request) {
http.SetCookie(w, &http.Cookie{
Name: "semaphore",
Value: "",
Expires: time.Now().Add(24 * 7 * time.Hour * -1),
Path: "/",
Name: "semaphore",
Value: "",
Expires: time.Now().Add(24 * 7 * time.Hour * -1),
Path: "/",
HttpOnly: true,
})
w.WriteHeader(http.StatusNoContent)