ekzyis/stacker.news
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use cookieOptions for pointer cookie (#2005)

Browse Source
This commit is contained in:
ekzyis 2025-03-21 19:53:49 -05:00 committed by GitHub
parent bce4053b72
commit 5e2185c18f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
components/account.js
View File

@ -9,6 +9,7 @@ import { UserListRow } from '@/components/user-list'
import Link from 'next/link' import Link from 'next/link'
import AddIcon from '@/svgs/add-fill.svg' import AddIcon from '@/svgs/add-fill.svg'
import { MultiAuthErrorBanner } from '@/components/banners' import { MultiAuthErrorBanner } from '@/components/banners'
import { cookieOptions } from '@/lib/auth'
const AccountContext = createContext() const AccountContext = createContext()
@ -16,10 +17,6 @@ const CHECK_ERRORS_INTERVAL_MS = 5_000
const b64Decode = str => Buffer.from(str, 'base64').toString('utf-8') const b64Decode = str => Buffer.from(str, 'base64').toString('utf-8')
const maybeSecureCookie = cookie => {
return window.location.protocol === 'https:' ? cookie + '; Secure' : cookie
}
export const AccountProvider = ({ children }) => { export const AccountProvider = ({ children }) => {
const [accounts, setAccounts] = useState([]) const [accounts, setAccounts] = useState([])
const [meAnon, setMeAnon] = useState(true) const [meAnon, setMeAnon] = useState(true)
@ -115,7 +112,8 @@ const AccountListRow = ({ account, ...props }) => {
e.preventDefault() e.preventDefault()
// update pointer cookie // update pointer cookie
document.cookie = maybeSecureCookie(`multi_auth.user-id=${anonRow ? 'anonymous' : account.id}; Path=/`) const options = cookieOptions({ httpOnly: false })
document.cookie = cookie.serialize('multi_auth.user-id', anonRow ? 'anonymous' : account.id, options)
// update state // update state
if (anonRow) { if (anonRow) {

2
lib/auth.js
View File

@ -11,7 +11,7 @@ const userJwtRegexp = /^multi_auth\.\d+$/
const HTTPS = process.env.NODE_ENV === 'production' const HTTPS = process.env.NODE_ENV === 'production'
const SESSION_COOKIE_NAME = HTTPS ? '__Secure-next-auth.session-token' : 'next-auth.session-token' const SESSION_COOKIE_NAME = HTTPS ? '__Secure-next-auth.session-token' : 'next-auth.session-token'
const cookieOptions = (args) => ({ export const cookieOptions = (args) => ({
path: '/', path: '/',
secure: process.env.NODE_ENV === 'production', secure: process.env.NODE_ENV === 'production',
// httpOnly cookies by default // httpOnly cookies by default