Mark session cookie as secure / HTTPS?

[qJake]

If I register the session service using the following code (a distributed cache has already been set up) -

services.AddSession(s =>
{
    s.CookieDomain = options.CookieDomain;
    s.CookieHttpOnly = options.CookieHttpOnly;
});

There is no option to enable the cookie to be secure (HTTPS only). This is in contrast to when setting up a forms authentication cookie, where the "Secure" option can be set:

app.UseCookieAuthentication(new CookieAuthenticationOptions
{
    CookieSecure = CookieSecurePolicy.Always
});

How can I set a session cookie to be secure/HTTPS-only with ASP.NET Core?

[Tratcher]

It's there now in 1.1.
https://github.com/aspnet/Session/blob/dev/src/Microsoft.AspNetCore.Session/SessionOptions.cs#L42
#106