fix: session cookie and drf request

codeforlife/request.py

@@ -3,6 +3,7 @@
 from django.contrib.auth.models import AnonymousUser
 from django.core.handlers.wsgi import WSGIRequest as _WSGIRequest
 from django.http import HttpRequest as _HttpRequest
+from rest_framework.request import Request as _Request
 
 from .user.models import User
 from .user.models.session import SessionStore
@@ -16,3 +17,8 @@ class WSGIRequest(_WSGIRequest):
 class HttpRequest(_HttpRequest):
     session: SessionStore
     user: t.Union[User, AnonymousUser]
+
+
+class Request(_Request):
+    session: SessionStore
+    user: t.Union[User, AnonymousUser]

codeforlife/settings/django.py

@@ -35,9 +35,11 @@
 # https://docs.djangoproject.com/en/3.2/topics/http/sessions/
 
 SESSION_ENGINE = "codeforlife.user.models.session"
-SESSION_COOKIE_AGE = 60 * 60
 SESSION_SAVE_EVERY_REQUEST = True
 SESSION_EXPIRE_AT_BROWSER_CLOSE = True
+SESSION_COOKIE_NAME = "sessionid_httponly_true"
+SESSION_COOKIE_HTTPONLY = True
+SESSION_COOKIE_AGE = 60 * 60
 SESSION_COOKIE_SECURE = True
 SESSION_COOKIE_SAMESITE = "None"
 SESSION_COOKIE_DOMAIN = "localhost" if DEBUG else "codeforlife.education"