@flowfuse/nr-launcher 2.32.2-fd7562f-202607271422.0 → 2.33.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,16 @@
|
|
|
1
|
+
#### 2.33.0: Release
|
|
2
|
+
|
|
3
|
+
- chore: bump @flowfuse/nr-assistant to ^0.18.1 (#591)
|
|
4
|
+
- [7935] Forbidden error when clicking between dashboards (#585)
|
|
5
|
+
- Bump actions/checkout from 7.0.0 to 7.0.1 (#584)
|
|
6
|
+
- Bump actions/setup-node from 6.4.0 to 7.0.0 (#581)
|
|
7
|
+
- Bump body-parser from 1.20.5 to 1.20.6 (#590)
|
|
8
|
+
- Bump find-my-way from 9.4.0 to 9.7.0 (#589)
|
|
9
|
+
- Bump tar from 7.5.16 to 7.5.22 (#588)
|
|
10
|
+
- Bump immutable from 4.3.8 to 4.3.9 (#587)
|
|
11
|
+
- Bump fast-uri from 3.1.2 to 3.1.4 (#586)
|
|
12
|
+
- Always include forgeURL in dashboard CSP frame-ancestors (#583)
|
|
13
|
+
|
|
1
14
|
#### 2.32.1: Release
|
|
2
15
|
|
|
3
16
|
- fix: Ensure MCP server-side sessions are terminated (#580)
|
|
@@ -77,6 +77,7 @@ module.exports = {
|
|
|
77
77
|
passport = new Passport()
|
|
78
78
|
httpNodeApp = app
|
|
79
79
|
|
|
80
|
+
const crossSiteCookie = (options.baseURL || '').startsWith('https://')
|
|
80
81
|
httpNodeApp.use(session({
|
|
81
82
|
// As the session is only used across the life-span of an auth
|
|
82
83
|
// hand-shake, we can use a instance specific random string
|
|
@@ -85,7 +86,8 @@ module.exports = {
|
|
|
85
86
|
saveUninitialized: false,
|
|
86
87
|
store: new MemoryStore({
|
|
87
88
|
checkPeriod: 86400000 // prune expired entries every 24h
|
|
88
|
-
})
|
|
89
|
+
}),
|
|
90
|
+
cookie: crossSiteCookie ? { sameSite: 'none', secure: true, partitioned: true } : {}
|
|
89
91
|
}))
|
|
90
92
|
|
|
91
93
|
app.use(passport.initialize())
|