Be sure the cookie is always using SSL, even temporarily

This commit is contained in:
Pierre-Yves Chibon 2015-05-19 12:57:45 +02:00
parent e3c08808f5
commit eb4960a401

View file

@ -105,7 +105,7 @@ PAGURE_AUTH = 'fas'
# This may be set to False when testing your application but should always
# be set to True in production.
# Default: ``True``.
SESSION_COOKIE_SECURE = False
SESSION_COOKIE_SECURE = True
# The name of the cookie used to store the session id.
# Default: ``.pagure``.