Mirroring/my-links
1
0
Fork 0
mirror of https://github.com/Sonny93/my-links.git synced 2025-12-09 23:15:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: (temp) disable xframe check and set same-site cookie to none

Browse Source
This commit is contained in:
Sonny
2024-07-07 19:59:17 +02:00
parent 136fcfac5d
commit 5d083327a8
3 changed files with 8 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.env.example
View File

@@ -1,5 +1,5 @@
# node ace generate:key # node ace generate:key
APP_KEY=UfdS996001I_koCN1OiZiSh-DJZTyvGc APP_KEY=soY8ZAtItT_fCkNUADfgffZUUo675lOj
TZ=UTC TZ=UTC
PORT=3333 PORT=3333
HOST=localhost HOST=localhost
@@ -13,4 +13,4 @@ DB_PASSWORD=my-links-pwd
DB_DATABASE=my-links DB_DATABASE=my-links
GOOGLE_CLIENT_ID= GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET= GOOGLE_CLIENT_SECRET=
GOOGLE_CLIENT_CALLBACK_URL=http://localhost:3333/auth/callback GOOGLE_CLIENT_CALLBACK_URL=http://localhost:3333/auth/callback

9
config/session.ts
View File

@@ -1,5 +1,4 @@
import env from '#start/env'; import env from '#start/env';
import app from '@adonisjs/core/services/app';
import { defineConfig, stores } from '@adonisjs/session'; import { defineConfig, stores } from '@adonisjs/session';
const sessionConfig = defineConfig({ const sessionConfig = defineConfig({
@@ -16,7 +15,7 @@ const sessionConfig = defineConfig({
* Define how long to keep the session data alive without * Define how long to keep the session data alive without
* any activity. * any activity.
*/ */
age: '2h', age: '7d',
/** /**
* Configuration for session cookie and the * Configuration for session cookie and the
@@ -25,8 +24,10 @@ const sessionConfig = defineConfig({
cookie: { cookie: {
path: '/', path: '/',
httpOnly: true, httpOnly: true,
secure: app.inProduction, secure: true,
sameSite: 'lax',
// TODO: set this to lax and found a solution to keep auth when using extension
sameSite: 'none',
}, },
/** /**

4
config/shield.ts
View File

@@ -27,9 +27,7 @@ const shieldConfig = defineConfig({
* iFrames * iFrames
*/ */
xFrame: { xFrame: {
enabled: true, enabled: false,
action: 'ALLOW-FROM',
domain: '*',
}, },
/** /**