add a few cookie options

leabs · Oct 2, 2023 · f1d20ca · f1d20ca
1 parent 6367ad8
commit f1d20ca
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 4 deletions.
diff --git a/src/pages/api/auth/github.ts b/src/pages/api/auth/github.ts
@@ -15,7 +15,15 @@ export const GET: APIRoute = async ({ url, cookies, redirect }) => {
   }
 
   const { access_token, refresh_token } = data.session;
-  cookies.set("sb-access-token", access_token, { path: "/" });
-  cookies.set("sb-refresh-token", refresh_token, { path: "/" });
+  cookies.set("sb-access-token", access_token, {
+    path: "/",
+    secure: true,
+    httpOnly: true,
+  });
+  cookies.set("sb-refresh-token", refresh_token, {
+    path: "/",
+    secure: true,
+    httpOnly: true,
+  });
   return redirect("/dashboard");
 };
diff --git a/src/pages/api/auth/signin.ts b/src/pages/api/auth/signin.ts
@@ -37,7 +37,15 @@ export const POST: APIRoute = async ({ request, cookies, redirect }) => {
   }
 
   const { access_token, refresh_token } = data.session;
-  cookies.set("sb-access-token", access_token, { path: "/" });
-  cookies.set("sb-refresh-token", refresh_token, { path: "/" });
+  cookies.set("sb-access-token", access_token, {
+    path: "/",
+    secure: true,
+    httpOnly: true,
+  });
+  cookies.set("sb-refresh-token", refresh_token, {
+    path: "/",
+    secure: true,
+    httpOnly: true,
+  });
   return redirect("/dashboard");
 };