Add missing cookie options to cookie cleanup on logout (#5626)

This commit is contained in:
Pascal Jufer
2021-05-12 18:34:58 +02:00
committed by GitHub
parent 7bdb220bd2
commit 44ffd60174

View File

@@ -146,7 +146,10 @@ router.post(
if (req.cookies.directus_refresh_token) {
res.clearCookie('directus_refresh_token', {
httpOnly: true,
domain: env.REFRESH_TOKEN_COOKIE_DOMAIN,
secure: env.REFRESH_TOKEN_COOKIE_SECURE ?? false,
sameSite: (env.REFRESH_TOKEN_COOKIE_SAME_SITE as 'lax' | 'strict' | 'none') || 'strict',
});
}