mirrors/object-browser
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixes Console issue #400 (#401)

Browse Source 
Previously cookie path was set to Path="/api", this was a performance
improvement to tell the browser to send the cookie only to request with
that prefix, however also consume endpoints on Path="/ws", since rfc6265
doesnt support multiple paths or regular expressions in the path field
of a cookie we are back to use Path="/" which means send the cookie to
all request under the current domain.

Co-authored-by: Daniel Valdivia <hola@danielvaldivia.com>
This commit is contained in:
Lenin Alevski
2020-11-18 14:42:02 -08:00
committed by GitHub
parent 761c6529a2
commit f1db949abc
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
restapi/utils.go
View File

@@ -109,7 +109,7 @@ func NewSessionCookieForConsole(token string) http.Cookie {
expiration := time.Now().Add(SessionDuration) expiration := time.Now().Add(SessionDuration)
return http.Cookie{ return http.Cookie{
Path: "/api", // browser will send cookie only for HTTP request under api path Path: "/",
Name: "token", Name: "token",
Value: token, Value: token,
MaxAge: int(SessionDuration.Seconds()), // 45 minutes MaxAge: int(SessionDuration.Seconds()), // 45 minutes
@@ -125,7 +125,7 @@ func NewSessionCookieForConsole(token string) http.Cookie {
func ExpireSessionCookie() http.Cookie { func ExpireSessionCookie() http.Cookie {
return http.Cookie{ return http.Cookie{
Path: "/api", // browser will send cookie only for HTTP request under api path Path: "/",
Name: "token", Name: "token",
Value: "", Value: "",
MaxAge: -1, MaxAge: -1,