search

lucia-auth / lucia

Authentication, simple and clean
https://lucia-auth.com
MIT License
8.42k stars 449 forks source link

[Feature Request]: Allow setting cookie attributes at creation #1468

Closed SelfhostedPro closed 4 months ago

SelfhostedPro commented 4 months ago

Package

lucia

Description

Hey, I'm building a selfhosted app and won't have control over if users are securing their site with https. Is there a way for me to set cookie attributes at creation so if they access the site over https I can automatically set the cookie to be secure?

pilcrowOnPaper commented 4 months ago

Going to close this as out-of-scope since it would require a bit of work to change our code and I don't think there's much use for it. I'd would recommend using your own cookie APIs if you need more customization, and more importantly, really recommend users to force HTTPS