search

nokia / kong-oidc

OIDC plugin for Kong
Apache License 2.0
455 stars 320 forks source link

Configure session cookie to be secure #221

Open vtamac opened 1 month ago

vtamac commented 1 month ago

Hi Team,

As far as I can see the 'session' cookie set by the plugin is not 'secure' but 'httponly'. Is there a way to configure the plugin to set cookies with secure flag.

Thank you, Tamás