groove/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2026-07-24 18:21:37 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 6

refactor(server): centralize request HTTPS and origin detection

Browse source
This commit is contained in:
mikiher 2026-07-16 17:10:42 +03:00
parent 6f03467f35
commit 527745b54e
4 changed files with 79 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

3
server/auth/TokenManager.js
View file

@ -6,6 +6,7 @@ const Logger = require('../Logger')
const requestIp = require('../libs/requestIp')
const jwt = require('../libs/jsonwebtoken')
const { isRequestSecure } = require('../utils/requestUtils')
class TokenManager {
/** @type {string} JWT secret key */
@ -59,7 +60,7 @@ class TokenManager {
setRefreshTokenCookie(req, res, refreshToken) {
res.cookie('refresh_token', refreshToken, {
httpOnly: true,
secure: req.secure || req.get('x-forwarded-proto') === 'https',
secure: isRequestSecure(req),
sameSite: 'lax',
maxAge: this.RefreshTokenExpiry * 1000,
path: '/'