add missing secure flag

lucia-auth · Nov 25, 2023 · af0774b · af0774b
1 parent dd0fc52
commit af0774b
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/documentation/content/oauth/basics/oauth2-pkce.md b/documentation/content/oauth/basics/oauth2-pkce.md
@@ -33,11 +33,13 @@ const [url, codeVerifier, state] = await twitterAuth.getAuthorizationUrl();
 setCookie("twitter_code_verifier", codeVerifier, {
 	path: "/",
 	httpOnly: true, // only readable in the server
+	secure: false, // set to `true` in production (HTTPS)
 	maxAge: 60 * 60 // a reasonable expiration date
 });
 setCookie("twitter_oauth_state", state, {
 	path: "/",
 	httpOnly: true, // only readable in the server
+	secure: false, // set to `true` in production (HTTPS)
 	maxAge: 60 * 60 // a reasonable expiration date
 });
 

diff --git a/documentation/content/oauth/basics/oauth2.md b/documentation/content/oauth/basics/oauth2.md
@@ -33,6 +33,7 @@ const [url, state] = await githubAuth.getAuthorizationUrl();
 setCookie("github_oauth_state", state, {
 	path: "/",
 	httpOnly: true, // only readable in the server
+	secure: false, // set to `true` in production (HTTPS)
 	maxAge: 60 * 60 // a reasonable expiration date
 });