Fix PDF generation for apps behind PlotlyAuth.

CHANGELOG.md

@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
+## [1.1.3] - 2018-09-12
+### Fixed
+- Detect requests coming from orca pdf generation and disable unsupported secure cookies. [#60](https://github.com/plotly/dash-auth/pull/60)
+
 ## [1.1.2] - 2018-08-15
 ### Fixed
 - Remove trailing slash from the cookie path.

dash_auth/oauth.py

@@ -6,6 +6,8 @@
 import itsdangerous
 import functools
 
+from ua_parser import user_agent_parser
+
 from .auth import Auth
 
 
@@ -238,11 +240,25 @@ def serve_oauth_redirect(self):
 
     def set_cookie(self, response, name, value, max_age,
                    httponly=True, samesite='Strict'):
+
+        secure = True if 'https:' in self._app_url else False
+
+        is_http = flask.request.environ.get(
+            'wsgi.url_scheme',
+            flask.request.environ.get('HTTP_X_FORWARDED_PROTO', 'http')
+        ) == 'http'
+
+        ua = user_agent_parser.ParseUserAgent(
+            flask.request.environ.get('HTTP_USER_AGENT', ''))
+
+        if ua.get('family') == 'Electron' and is_http:
+            secure = False
+
         response.set_cookie(
             name,
             value=value,
             max_age=max_age,
-            secure=True if 'https:' in self._app_url else False,
+            secure=secure,
             path=self._app.config['requests_pathname_prefix'].rstrip('/'),
             httponly=httponly,
             samesite=samesite

dash_auth/version.py

@@ -1 +1 @@
-__version__ = '1.1.2'
+__version__ = '1.1.3'

dev-requirements.txt

@@ -2,6 +2,7 @@ dash_core_components
 dash_html_components
 dash_renderer
 dash>=0.18.3
+ua_parser
 selenium
 mock
 tox

setup.py

@@ -21,7 +21,8 @@
         'dash_html_components',
         'dash_core_components',
         'retrying',
-        'itsdangerous>=0.18'
+        'itsdangerous>=0.18',
+        'ua_parser'
     ],
     include_package_data=True,
     url='https://plot.ly/dash',