Merge branch 'cyber-security' into develop

OpenBankProject · Nov 9, 2023 · a1023ba · a1023ba
2 parents 6812c95 + ad33b54
commit a1023ba
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/apimanager/apimanager/settings.py b/apimanager/apimanager/settings.py
@@ -284,6 +284,13 @@
 # Always save session$
 SESSION_SAVE_EVERY_REQUEST = True
 
+# Session Cookie Settings
+SESSION_COOKIE_SECURE = True
+SESSION_COOKIE_HTTPONLY = True
+SESSION_COOKIE_AGE = 300
+SESSION_ENGINE = "django.contrib.sessions.backends.signed_cookies"
+
+
 # Paths on API_HOST to OAuth
 OAUTH_TOKEN_PATH = '/oauth/initiate'
 OAUTH_AUTHORIZATION_PATH = '/oauth/authorize'