fix: enforce secure cookie setting for session management

2025-08-07 14:05:14 +02:00 · 2025-08-07 14:05:14 +02:00 · eef81d7409
parent 98ef466022
commit eef81d7409
1 changed files with 1 additions and 1 deletions
--- a/server/api/auth/direct-login.post.ts
+++ b/server/api/auth/direct-login.post.ts
@ -321,7 +321,7 @@ export default defineEventHandler(async (event) => {
      // Use Nuxt's setCookie helper directly with the encrypted value
      setCookie(event, 'monacousa-session', encrypted, {
        httpOnly: true,
-        secure: process.env.NODE_ENV === 'production',
+        secure: true,
        sameSite: 'lax',
        maxAge,
        path: '/',