diff options
| author | Paul Buetow <paul@buetow.org> | 2026-04-30 16:55:02 +0300 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-04-30 16:55:02 +0300 |
| commit | 6be4194f1f39354355cce29a2f8b8f9af7286fbd (patch) | |
| tree | 1a9c01796a7ab97ec6087de0295dec55cec6075a /PLAN.md | |
| parent | fea0840ea65afb2b29abb378bd3c96697e0bbf4b (diff) | |
task oa: Add SECURE_COOKIES config to control session cookie Secure flag
- Add SecureCookies bool to internal.Config (default true)
- Update LoadConfig in internal/config.go to parse SECURE_COOKIES env var
- Update setSessionCookie and clearSessionCookie in internal/api/handlers.go to read cfg.SecureCookies
- Add tests verifying Secure=true/false and logout clears cookie accordingly
- Update AGENTS.md and PLAN.md with new option documentation
Diffstat (limited to 'PLAN.md')
| -rw-r--r-- | PLAN.md | 1 |
1 files changed, 1 insertions, 0 deletions
@@ -403,6 +403,7 @@ CREATE INDEX idx_shares_expires ON shares(expires_at); | `GC_INTERVAL_MINUTES` | `30` | Garbage collector tick | | `SHARE_DEFAULT_EXPIRY_DAYS` | `7` | Default share link lifetime | | `LOG_LEVEL` | `info` | Log verbosity | +| `SECURE_COOKIES` | `true` | Set `Secure` flag on session cookies; disable for plain-HTTP local deployments | --- |