Add optional cookieValidationKey

silinternational · Jun 13, 2018 · f8549ca · f8549ca
1 parent 8160aa9
commit f8549ca
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/application/frontend/config/main.php b/application/frontend/config/main.php
@@ -4,6 +4,7 @@
 
 /* Get frontend-specific config settings from ENV vars or set defaults. */
 $frontCookieSecure = Env::get('FRONT_COOKIE_SECURE', true);
+$cookieValidationKey = Env::get('COOKIE_VALIDATION_KEY');
 
 $sessionLifetime = 1800; // 30 minutes
 
@@ -36,6 +37,8 @@
             'errorAction' => 'site/error',
         ],
         'request' => [
+            'cookieValidationKey' => $cookieValidationKey,
+            'enableCookieValidation' => !empty($cookieValidationKey),
             'enableCsrfValidation' => false,
             'parsers' => [
                 'application/json' => 'yii\web\JsonParser',

diff --git a/local.env.dist b/local.env.dist
@@ -12,6 +12,7 @@ RECAPTCHA_SITE_KEY=
 RECAPTCHA_SECRET_KEY=
 COMPOSER_AUTH={"github-oauth":{"github.com":"tokenhere"}}
 COMPOSER_CACHE_DIR=/tmp
+COOKIE_VALIDATION_KEY=
 UI_URL=http://idp-pw.local/#
 UI_CORS_ORIGIN=http://idp-pw.local
 HELP_CENTER_URL=https://google.com/