COOKIE_SECURE is always True

christianp · christianp · commit 2529220a91b6 · 2024-12-04T13:51:42.000Z
diff --git a/files/numbas-lti-provider/settings.py b/files/numbas-lti-provider/settings.py
@@ -158,8 +158,8 @@
 
 SECURE_SSL_REDIRECT = False
 
-SESSION_COOKIE_SECURE = not DEBUG
-CSRF_COOKIE_SECURE = not DEBUG
+SESSION_COOKIE_SECURE = True
+CSRF_COOKIE_SECURE = True
 SESSION_COOKIE_SAMESITE = 'None'
 CSRF_COOKIE_SAMESITE = 'None'
 SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
