strapi-identity 0.4.1 → 0.4.2

package/dist/server/index.js

@@ -9663,7 +9663,8 @@ const replaceLogin = (route2, secret2, domain) => {
     };
     const newToken = jwt.sign(newPayload, secret2, { expiresIn: "5m" });
     const expires = new Date(Date.now() + 5 * 60 * 1e3);
-    const opt = { domain, httpOnly: false, overwrite: true, secure: ctx.request.secure, expires };
+    const secure = strapi.config.get("admin.auth.cookie.secure") ?? process.env.NODE_ENV === "production";
+    const opt = { domain, httpOnly: false, overwrite: true, secure, expires };
     ctx.cookies.set("strapi_admin_mfa", newToken, opt);
     ctx.body.data = { data: {}, error: null };
   });
@@ -9954,19 +9955,20 @@ const controller = ({ strapi: strapi2 }) => ({
       ).generateRefreshToken(payload.userId, payload.deviceId, {
         type: payload.rememberMe ? "refresh" : "session"
       });
+      const secure = strapi2.config.get("admin.auth.cookie.secure") ?? process.env.NODE_ENV === "production";
       ctx.cookies.set(
         "strapi_admin_refresh",
         refreshToken,
         buildCookieOptionsWithExpiry(
           payload.rememberMe ? "refresh" : "session",
           absoluteExpiresAt,
-          ctx.request.secure
+          secure
         )
       );
       const accessResult = await sessionManager("admin").generateAccessToken(refreshToken);
       const { token: accessToken } = accessResult;
       const domain = strapi2.config.get("admin.auth.domain");
-      const opt = { httpOnly: false, secure: ctx.request.secure, overwrite: true, domain };
+      const opt = { httpOnly: false, secure, overwrite: true, domain };
       ctx.cookies.set("jwtToken", accessToken, opt);
       ctx.cookies.set("strapi_admin_mfa", null, { expires: /* @__PURE__ */ new Date(0) });
       ctx.status = 200;

package/dist/server/index.mjs

@@ -9656,7 +9656,8 @@ const replaceLogin = (route2, secret2, domain) => {
     };
     const newToken = jwt.sign(newPayload, secret2, { expiresIn: "5m" });
     const expires = new Date(Date.now() + 5 * 60 * 1e3);
-    const opt = { domain, httpOnly: false, overwrite: true, secure: ctx.request.secure, expires };
+    const secure = strapi.config.get("admin.auth.cookie.secure") ?? process.env.NODE_ENV === "production";
+    const opt = { domain, httpOnly: false, overwrite: true, secure, expires };
     ctx.cookies.set("strapi_admin_mfa", newToken, opt);
     ctx.body.data = { data: {}, error: null };
   });
@@ -9947,19 +9948,20 @@ const controller = ({ strapi: strapi2 }) => ({
       ).generateRefreshToken(payload.userId, payload.deviceId, {
         type: payload.rememberMe ? "refresh" : "session"
       });
+      const secure = strapi2.config.get("admin.auth.cookie.secure") ?? process.env.NODE_ENV === "production";
       ctx.cookies.set(
         "strapi_admin_refresh",
         refreshToken,
         buildCookieOptionsWithExpiry(
           payload.rememberMe ? "refresh" : "session",
           absoluteExpiresAt,
-          ctx.request.secure
+          secure
         )
       );
       const accessResult = await sessionManager("admin").generateAccessToken(refreshToken);
       const { token: accessToken } = accessResult;
       const domain = strapi2.config.get("admin.auth.domain");
-      const opt = { httpOnly: false, secure: ctx.request.secure, overwrite: true, domain };
+      const opt = { httpOnly: false, secure, overwrite: true, domain };
       ctx.cookies.set("jwtToken", accessToken, opt);
       ctx.cookies.set("strapi_admin_mfa", null, { expires: /* @__PURE__ */ new Date(0) });
       ctx.status = 200;

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.4.1",
+  "version": "0.4.2",
   "keywords": [
     "strapi",
     "plugin",