administrator/frigate
1
0
Fork 0
mirror of https://github.com/blakeblackshear/frigate.git synced 2026-10-20 21:52:50 +03:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

set the secure cookie flag when the request arrived over tls

Browse Source 
The session cookie only got the Secure flag from auth.cookie_secure, which defaults to false even though TLS is on by default, so browsers would send it over plain HTTP. The cookie is now Secure whenever nginx reports an https scheme, and nginx passes that scheme to the /auth subrequest so refreshed cookies match. cookie_secure still forces the flag for a reverse proxy that terminates TLS in front of plain-HTTP Frigate.
This commit is contained in:
Josh Hawkins
2026-10-18 12:18:58 -05:00
parent 3dc382938c
commit a2e7e5c991
6 changed files with 58 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/public/locales/en/config/global.json
+1 -1
View File
@@ -40,7 +40,7 @@
},
"cookie_secure": {
"label": "Secure cookie flag",
"description": "Set the secure flag on the auth cookie; should be true when using TLS."
"description": "Always set the secure flag on the auth cookie. Frigate sets it automatically when serving TLS; enable this when a reverse proxy terminates TLS in front of Frigate."
},
"session_length": {
"label": "Session length",