search

zohl / servant-auth-cookie

Authentication via encrypted cookies
BSD 3-Clause "New" or "Revised" License
23 stars 23 forks source link

Allow cookie directives with two parts #46

Closed kristoff3r closed 6 years ago

kristoff3r commented 6 years ago

This is needed in order to set e.g. SameSite=Strict. It does make the default slightly uglier though.

I thought about splitting the field on '=', so "SameSite=Strict" would become ("SameSite,"Strict"), but I personally preferred this option. It does have the advantage of not breaking backward compatibility though.