From a98dfc78fec5f0252b81d79b197fe69a5af4b458 Mon Sep 17 00:00:00 2001 From: ale <ale@incal.net> Date: Fri, 16 Dec 2022 11:06:23 +0000 Subject: [PATCH] Set Secure bit when deleting the nonce cookie Might fix a warning. --- httpsso/handler.go | 1 + 1 file changed, 1 insertion(+) diff --git a/httpsso/handler.go b/httpsso/handler.go index 4284821..5387c03 100644 --- a/httpsso/handler.go +++ b/httpsso/handler.go @@ -149,6 +149,7 @@ func (s *SSOWrapper) handleLogin(w http.ResponseWriter, req *http.Request, servi cookie.MaxAge = -1 cookie.Value = "" cookie.SameSite = s.SameSite + cookie.Secure = true http.SetCookie(w, cookie) tkt, err := s.v.Validate(t, nonce, service, groups) -- GitLab