From 97aa36e8531c7aaa40ee9422464bcb5bd918e2c2 Mon Sep 17 00:00:00 2001 From: Marcin Kulik Date: Wed, 29 Jan 2014 16:00:50 +0100 Subject: [PATCH] Use secure cookies when scheme is "https" --- config/cfg.rb | 7 ++++++- config/initializers/session_store.rb | 2 +- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/config/cfg.rb b/config/cfg.rb index c170ada..d6226d0 100644 --- a/config/cfg.rb +++ b/config/cfg.rb @@ -14,7 +14,8 @@ defaults = { AWS_REGION: nil, AWS_BUCKET: nil, SECRET_TOKEN: '21deaa1a1228e119434aa783ecb4af21be7513ff1f5b8c1d8894241e5fc70ad395db72c8c1b0508a0ebb994ed88a8d73f6c84e44f7a4bc554a40d77f9844d2f4', - LOCAL_PERSONA_JS: true + LOCAL_PERSONA_JS: true, + SCHEME: 'http' }.stringify_keys! cfg_file = File.expand_path(File.dirname(__FILE__) + '/asciinema.yml') @@ -57,6 +58,10 @@ module Asciinema end end + def ssl? + scheme == 'https' + end + private def normalize_key(key) diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb index 7cfca16..b84a9db 100644 --- a/config/initializers/session_store.rb +++ b/config/initializers/session_store.rb @@ -1,3 +1,3 @@ # Be sure to restart your server when you modify this file. -Asciinema::Application.config.session_store :cookie_store, key: '_asciinema_session' +Asciinema::Application.config.session_store :cookie_store, key: '_asciinema_session', secure: CFG.ssl?