@rpcbase/server 0.146.0 → 0.148.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -66,15 +66,24 @@ setTimeout(async() => {
66
66
  secret: "session secret wowow",
67
67
  resave: false,
68
68
  cookie: {
69
+ // TODO: set to secure in production
70
+ // secure: true
69
71
  // TODO: test this
70
72
  maxAge: 1000 * 3600 * 24 * 90 // 90 days
71
73
  }
72
74
  }
73
75
 
74
- if (CONTAINER_MODE !== "native" && typeof APP_DOMAIN === "string" && APP_DOMAIN.trim() !== "") {
75
- log("SETTING COOKIE DOMAIN TO", APP_DOMAIN)
76
- session_config.cookie.domain = APP_DOMAIN
77
- }
76
+ // WARNING: apparently doesn't work on localhost or .local domains
77
+ // https://stackoverflow.com/questions/1134290/cookies-on-localhost-with-explicit-domain
78
+ // if (CONTAINER_MODE !== "native" && typeof APP_DOMAIN === "string" && APP_DOMAIN.trim() !== "") {
79
+ // log("SETTING COOKIE DOMAIN TO", APP_DOMAIN)
80
+ // // session_config.cookie.domain = APP_DOMAIN
81
+ // } else {
82
+ // session_config.cookie.sameSite = "none"
83
+ // }
84
+ session_config.cookie.sameSite = "none"
85
+
86
+
78
87
 
79
88
  session_middleware = session(session_config)
80
89
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@rpcbase/server",
3
- "version": "0.146.0",
3
+ "version": "0.148.0",
4
4
  "license": "SSPL-1.0",
5
5
  "main": "./index.js",
6
6
  "bin": {