Winsomnia/MireaBackend
1
0
Fork 0
Code Pull Requests Actions Projects Releases Activity

refactor: set HttpOnly for debug mode too

Browse Source
This commit is contained in:
Polianin Nikita 2024-08-24 02:25:29 +03:00
parent 565252382c
commit dee89b278b
2 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Endpoint/Controllers/Configuration/SetupController.cs
View File

@ -75,9 +75,9 @@ public partial class SetupController(
{ {
Path = UrlHelper.GetSubPathWithoutFirstApiName + "api", Path = UrlHelper.GetSubPathWithoutFirstApiName + "api",
Domain = HttpContext.GetCurrentDomain(), Domain = HttpContext.GetCurrentDomain(),
HttpOnly = true,
#if !DEBUG #if !DEBUG
Secure = true, Secure = true
HttpOnly = true
#endif #endif
}); });
return Ok(true); return Ok(true);

10
Endpoint/Controllers/V1/AuthController.cs
View File

@ -31,9 +31,9 @@ public class AuthController(IOptionsSnapshot<Admin> user, AuthService auth, Pass
Expires = expires, Expires = expires,
Path = UrlHelper.GetSubPathWithoutFirstApiName + "api", Path = UrlHelper.GetSubPathWithoutFirstApiName + "api",
Domain = HttpContext.GetCurrentDomain(), Domain = HttpContext.GetCurrentDomain(),
HttpOnly = true,
#if !DEBUG #if !DEBUG
Secure = true, Secure = true
HttpOnly = true
#endif #endif
}; };
@ -49,9 +49,9 @@ public class AuthController(IOptionsSnapshot<Admin> user, AuthService auth, Pass
[ApiExplorerSettings(IgnoreApi = true)] [ApiExplorerSettings(IgnoreApi = true)]
public void OnActionExecuting(ActionExecutingContext context) public void OnActionExecuting(ActionExecutingContext context)
{ {
Ip = context.HttpContext.Connection.RemoteIpAddress?.ToString()!; Ip = HttpContext.Connection.RemoteIpAddress?.ToString()!;
UserAgent = context.HttpContext.Request.Headers.UserAgent.ToString(); UserAgent = Request.Headers.UserAgent.ToString();
Fingerprint = context.HttpContext.Request.Cookies["user_key"] ?? string.Empty; Fingerprint = Request.Cookies["user_key"] ?? string.Empty;
RefreshToken = Request.Cookies["refresh_token"] ?? string.Empty; RefreshToken = Request.Cookies["refresh_token"] ?? string.Empty;
if (!string.IsNullOrWhiteSpace(Fingerprint)) return; if (!string.IsNullOrWhiteSpace(Fingerprint)) return;