Make other flask session cookies secure

This commit is contained in:
Till Maas 2015-02-04 15:34:31 +01:00
parent 4a2e0ab67b
commit 73b1222f6b
8 changed files with 24 additions and 0 deletions

View file

@ -32,6 +32,9 @@ MAX_CONTENT_LENGTH = 1024 * 10
# This is required to fix login
PREFERRED_URL_SCHEME='https'
# Make browsers send session cookie only via HTTPS
SESSION_COOKIE_SECURE = True
{% if env == 'staging' %}
FAS_OPENID_ENDPOINT = 'https://id.stg.fedoraproject.org/'
{% endif %}