lifegpc/eh-downloader
1
0
Fork 0
mirror of https://github.com/lifegpc/eh-downloader.git synced 2026-07-08 01:31:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

Set-Cookie use __Host-

Browse Source
This commit is contained in:
lifegpc
2024-06-03 09:10:51 +08:00
parent fd88b83b9a
commit 531db88da7
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
routes/api/token.ts
View File

@@ -65,7 +65,8 @@ export const handler: Handlers = {
m.db.delete_token(t);
const headers: HeadersInit = {};
if (is_from_auth && is_from_cookie) {
headers["Set-Cookie"] = `token=${token.token}; Max-Age=0${
const host = token.secure ? "__Host-" : "";
headers["Set-Cookie"] = `${host}token=${token.token}; Max-Age=0${
token.http_only ? "; HttpOnly" : ""
}${
token.secure
@@ -152,8 +153,9 @@ export const handler: Handlers = {
);
const headers: HeadersInit = {};
if (set_cookie) {
const host = token.secure ? "__Host-" : "";
headers["Set-Cookie"] =
`token=${token.token}; Expires=${token.expired.toUTCString()}${
`${host}token=${token.token}; Expires=${token.expired.toUTCString()}${
http_only ? "; HttpOnly" : ""
}${
secure