mrpiglr/AeThex-OS
1
0
Fork 0
mirror of https://github.com/AeThex-Corporation/AeThex-OS.git synced 2026-04-18 06:17:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Improve login reliability by fixing session cookie configuration

Browse source 
Update server session configuration to correctly handle cookies in development environments, specifically addressing issues with Vite's proxy and `sameSite` settings to ensure persistent user sessions.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 279f1558-c0e3-40e4-8217-be7e9f4c6eca
Replit-Commit-Checkpoint-Type: full_checkpoint
Replit-Commit-Event-Id: 66cabf5a-21e6-4022-a781-b6e3b087a382
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/b984cb14-1d19-4944-922b-bc79e821ed35/279f1558-c0e3-40e4-8217-be7e9f4c6eca/ztDSlS2
Replit-Helium-Checkpoint-Created: true
This commit is contained in:
sirpiglr 2025-12-21 04:22:34 +00:00
parent b1b63ecad7
commit 1f65e8cc3e
1 changed files with 7 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
server/index.ts
View file

@ -7,6 +7,9 @@ import { createServer } from "http";
const app = express();
const httpServer = createServer(app);
// Trust proxy for proper cookie handling behind Vite dev server
app.set("trust proxy", 1);
declare module "http" {
interface IncomingMessage {
rawBody: unknown;
@ -20,17 +23,19 @@ if (process.env.NODE_ENV === "production" && !sessionSecret) {
}
// Session configuration with security best practices
const isProduction = process.env.NODE_ENV === "production";
app.use(
session({
secret: sessionSecret || "dev-only-secret-not-for-prod",
resave: false,
saveUninitialized: false,
cookie: {
secure: process.env.NODE_ENV === "production",
secure: isProduction,
httpOnly: true,
sameSite: "lax", // Allow navigation from external links
sameSite: isProduction ? "lax" : "lax",
maxAge: 7 * 24 * 60 * 60 * 1000, // 7 days
},
proxy: !isProduction, // Trust first proxy in dev for Vite
})
);