From e656893c681968b64596a0b880a2d82e685adf00 Mon Sep 17 00:00:00 2001 From: Hugo Pierret Date: Mon, 29 Sep 2025 01:10:19 +0200 Subject: [PATCH] ensure https in backend --- main.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/main.py b/main.py index 697afc8..d44299c 100644 --- a/main.py +++ b/main.py @@ -15,10 +15,10 @@ def create_app(): ] CORS(app, supports_credentials=True, origins=origins) - app.config.update( - SESSION_COOKIE_SAMESITE="None", # necessary for cross-site cookies - SESSION_COOKIE_SECURE=False # True in prod (HTTPS) - ) + if env == "production": + app.config.update(SESSION_COOKIE_SAMESITE="None", SESSION_COOKIE_SECURE=True) + else: + app.config.update(SESSION_COOKIE_SAMESITE="Lax", SESSION_COOKIE_SECURE=False) env = os.environ.get('FLASK_ENV', 'default') app.config.from_object(config[env])