From b2eb0b5439e7ca9c5ecf83dfed77529f87eb2df9 Mon Sep 17 00:00:00 2001 From: juancarmore Date: Tue, 24 Jun 2025 18:36:17 +0200 Subject: [PATCH] backend: add MEET_COOKIE_SECURE env var for cookie security settings --- backend/src/environment.ts | 1 + backend/src/utils/cookie-utils.ts | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/backend/src/environment.ts b/backend/src/environment.ts index ccdcd05..7c11238 100644 --- a/backend/src/environment.ts +++ b/backend/src/environment.ts @@ -25,6 +25,7 @@ export const { MEET_API_KEY = '', MEET_ADMIN_USER = 'admin', MEET_ADMIN_SECRET = 'admin', + MEET_COOKIE_SECURE = 'false', // Token expiration times MEET_ACCESS_TOKEN_EXPIRATION = '2h', diff --git a/backend/src/utils/cookie-utils.ts b/backend/src/utils/cookie-utils.ts index bf49c63..634c162 100644 --- a/backend/src/utils/cookie-utils.ts +++ b/backend/src/utils/cookie-utils.ts @@ -1,10 +1,11 @@ import { CookieOptions } from 'express'; import ms, { StringValue } from 'ms'; +import { MEET_COOKIE_SECURE } from '../environment.js'; export const getCookieOptions = (path: string, expiration: string): CookieOptions => { return { httpOnly: true, - secure: process.env.NODE_ENV === 'production', + secure: MEET_COOKIE_SECURE === 'true', sameSite: 'strict', maxAge: ms(expiration as StringValue), path