Enforce the pagure cookie to be over https

This commit is contained in:
Pierre-Yves Chibon 2015-05-17 10:36:21 +02:00
parent 19e340961f
commit 80463e9893

View file

@ -117,7 +117,7 @@ PAGURE_AUTH = 'fas'
# This may be set to False when testing your application but should always # This may be set to False when testing your application but should always
# be set to True in production. # be set to True in production.
# Default: ``True``. # Default: ``True``.
SESSION_COOKIE_SECURE = False SESSION_COOKIE_SECURE = True
# The name of the cookie used to store the session id. # The name of the cookie used to store the session id.
# Default: ``.pagure``. # Default: ``.pagure``.