jazzband / django-revproxy

Reverse Proxy view that supports all HTTP methods, Diazo transformations and Single Sign-On.
Mozilla Public License 2.0
305 stars 118 forks source link

Fix Valid Cookie Attribute List #150

Closed CodyHunt6sense closed 2 years ago

CodyHunt6sense commented 2 years ago

The list of valid cookie attributes is missing SameSite, and the Max-Ageattribute should be spelled with a hyphen, not an underscore. These errors were causing cookies with these attributes set to be dropped when returned across the proxy: image

Reference for attribute names: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie