update cookie settings for workaround, check security implications of…

… httponly
Geoportail-Luxembourg · Jan 8, 2021 · c338c5f · c338c5f
1 parent 0315d43
commit c338c5f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/env.default b/env.default
@@ -11,7 +11,7 @@ AUTHTKT_REISSUE_TIME=9000
 AUTHTKT_MAXAGE=86400
 AUTHTKT_SECRET=aed4ma7pah7Riph9paMoow3raeB5ooSa2ayee4fooQuohT7Etinohshah7eib4Re
 AUTHTKT_COOKIENAME=auth_tkt_geoportailv3
-AUTHTKT_HTTP_ONLY=True
+AUTHTKT_HTTP_ONLY=False
 AUTHTKT_SECURE=True
 AUTHTKT_SAMESITE=Lax
 BASICAUTH=False

diff --git a/geoportal/vars.yaml b/geoportal/vars.yaml
@@ -127,7 +127,7 @@ vars:
   interfaces_config:
     main:
       constants:
-        appAuthtktCookieName: auth_tkt_main
+        appAuthtktCookieName: auth_tkt_geoportailv3
         appExcludeThemeLayerSearch: []
         appOverviewMapBaseLayer: basemap_2015_global
         appOverviewMapShow: true