Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(cookies): always set httponly flag on cookies (also update deps) PXP-7593 #872

Merged
merged 2 commits into from
Feb 10, 2021

Conversation

Avantol13
Copy link
Contributor

New Features

Breaking Changes

Bug Fixes

Improvements

  • make sure to set httponly on all cookies

Dependency updates

Deployment changes

@Avantol13 Avantol13 changed the title feat(cookies): always set httponly flag on cookies (also update deps) feat(cookies): always set httponly flag on cookies (also update deps) PXP-7593 Feb 3, 2021
@github-actions
Copy link

github-actions bot commented Feb 3, 2021

The style in this PR agrees with black. ✔️

This formatting comment was generated automatically by a script in uc-cdis/wool.

client.set_cookie("localhost", config["SESSION_COOKIE_NAME"], test_session_jwt)
client.set_cookie(
"localhost", config["SESSION_COOKIE_NAME"], test_session_jwt, httponly=True
)
client.set_cookie(
"localhost", config["ACCESS_TOKEN_COOKIE_NAME"], test_access_jwt
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what about this one?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good catch! fixing

client.set_cookie("localhost", config["SESSION_COOKIE_NAME"], test_session_jwt)
client.set_cookie(
"localhost", config["SESSION_COOKIE_NAME"], test_session_jwt, httponly=True
)
client.set_cookie(
"localhost", config["ACCESS_TOKEN_COOKIE_NAME"], test_access_jwt
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and this one?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good catch! fixing

@Avantol13 Avantol13 merged commit d0fe6fc into master Feb 10, 2021
@Avantol13 Avantol13 deleted the feat/httponlycookies branch February 10, 2021 19:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants