secure: true for production

https://github.com/polygon-software/flox/blob/4d186fe59f2032a9ae87c9743e434fb43c7c4b76/frontend/src/flox/modules/auth/tools/cookie.helpers.ts#L26


import { Cookies } from 'quasar';

import Env from 'src/env';

/**
 * This file contains all cookie-related helper functions
 */

/**
 * Persists a given payload to one or multiple cookies
 *
 * @param category - sub-category to store the cookie to
 * @param payload - the data to persist (in stringified form)
 */
export function persistToCookies(
  category: string,
  payload: Record<string, any>
): void {
  // Set cookie when SSR fetch is done (i.e. only browser can set a cookie)
  if (!Env.SERVER) {
    // Set 'secure' to true for production
    Object.keys(payload).forEach((key: string) => {
      Cookies.set(
        `${category}.${key}`,
        JSON.stringify(payload[key]),
        { expires: 1, secure: false } // TODO secure: true for production
      );
    });
  }
}

/**
 * Deletes all cookies within a given category
 *
 * @param category - the category within which to delete (e.g. "authentication")
 */
export function deleteCookies(category: string): void {
  const allCookies: Set<unknown> = Cookies.getAll() as Set<unknown>;

  Object.keys(allCookies).forEach((cookieKey: string) => {
    if (cookieKey.startsWith(`${category}.`)) {
      Cookies.remove(cookieKey);
    }
  });
}

310cadf0b224d2701bbe4236652d23596f8b01c0

polygon-software / flox

secure: true for production #467