Return cookies to being secure

team-balloonicorn · Jun 17, 2024 · 9d18197 · 9d18197
1 parent a461910
commit 9d18197
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/src/puck/web/auth.gleam b/src/puck/web/auth.gleam
@@ -225,8 +225,7 @@ fn set_signed_user_id_cookie(
 ) -> Response {
   <<int.to_string(user_id):utf8>>
   |> crypto.sign_message(<<signing_secret:utf8>>, crypto.Sha256)
-  // TODO: re-enable secure cookies
-  |> response.set_cookie(response, auth_cookie, _, cookie.defaults(http.Http))
+  |> response.set_cookie(response, auth_cookie, _, cookie.defaults(http.Https))
 }
 
 pub fn get_user_from_session(