Actions
Feature #982
open
option to set secure flag on session and autologin cookie
Status:
New
Priority:
Low
Assignee:
-
Category:
Accounts / authentication
Target version:
-
Start date:
2008-04-03
Due date:
% Done:
0%
Estimated time:
Resolution:
Description
Is it possible to have a GUI setting to control the secure flag on the session and autologin cookies? I was able to set them by making the changes below:
app/controllers/account_controller.rb
cookies[:autologin] = { :value => token.value, :expires => 1.year.from_now, :secure => true }
config/environment.rb
ActionController::Base.session_options[:session_secure] = true
thanks!
Related issues
Updated by S Reid over 14 years ago
Any plans to implement this ? I think it's needed to avoid HTTP Session hijacking ?
Updated by Toshi MARUYAMA over 14 years ago
- Category set to Accounts / authentication
Actions