hapijs / crumb

CSRF crumb generation and validation for hapi
Other
171 stars 50 forks source link

isSecure settings are not working #145

Closed rgaikar-lilly closed 4 years ago

rgaikar-lilly commented 4 years ago

Support plan

Context

What are you trying to achieve or the steps to reproduce?

      key: 'crumb',
      size: 43,
      autoGenerate: true,
      addToViewContext: true,
      cookieOptions: {
        isSecure: true,
        isHttpOnly: true,
        isSameSite: 'Strict',
        encoding: 'iron',
        clearInvalid: true,
        strictHeader: true,
        path: '/',
        domain: process.env.COOKIE_DOMAIN,
        password: process.env.COOKIE_PASSWORD
      },
      headerName: 'X-CSRF-Token',
      restful: true,
      skip: false,
      enforce: true,
      logUnauthorized: false

What was the result you got?

I tried setting isSecure as false, but it it still mark it as secure in application cookie on browser

What result did you expect?

isSecure flag changes does not reflect on client browser.

hueniverse commented 4 years ago

Unfortunately, no community resources were available to help resolve this issue after two weeks, and it is being closed. We close unresolved community issues to keep the issue tracker organized and effective. Please check https://hapi.dev/support for other support options.