moves cookie https setting to [security]

This commit is contained in:
bergquist
2019-01-24 19:04:58 +01:00
parent 9153b6ed96
commit d6edaa1328
7 changed files with 25 additions and 21 deletions

View File

@@ -176,7 +176,7 @@ func (hs *HTTPServer) trySetEncryptedCookie(ctx *m.ReqContext, cookieName string
Value: hex.EncodeToString(encryptedError),
HttpOnly: true,
Path: setting.AppSubUrl + "/",
Secure: hs.Cfg.LoginCookieSecure,
Secure: hs.Cfg.SecurityHTTPSCookies,
})
return nil