Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add additional builder for cookie settings #6

Conversation

jeremymarch
Copy link
Contributor

Hi,
I'm proposing to add builder options for the rest of the cookie settings in CookieMessageStore. It's useful to be able to set these, for example when testing without https, etc. Please let me know, if there is anything I can do to improve this.
All best,
Jeremy

@LukeMathWalker
Copy link
Owner

I'm not fond of exposing knobs to weaken the security posture - looking at secure and http_only.
I don't have any issues with exposing path and domain.

@jeremymarch
Copy link
Contributor Author

Thanks for the feedback. Fixed. Now only path and domain are settable.

@jeremymarch
Copy link
Contributor Author

Thanks for checking that. How about this? Domain should now remain unset if it is not set by the user.

Copy link
Owner

@LukeMathWalker LukeMathWalker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking good in terms of functionality! Left a style comment.

actix-web-flash-messages/src/storage/cookies.rs Outdated Show resolved Hide resolved
@jeremymarch
Copy link
Contributor Author

Thanks! Yes, much better this way!

Copy link
Contributor Author

@jeremymarch jeremymarch left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice improvements to the comments :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants