User insecure cookies to allow non-HTTPS sessions

2025-11-03 18:13:27 -05:00 · 2017-12-05 05:42:11 -05:00
parent e4defb7348
commit 3f28e083e7
1 changed files with 1 additions and 1 deletions
--- a/internal/handlers/sessions.go
+++ b/internal/handlers/sessions.go
@@ -102,7 +102,7 @@ func NewSession(tx *Tx, r *http.Request, userid int64) (*NewSessionWriter, error
 		Path:     "/",
 		Domain:   r.URL.Host,
 		Expires:  time.Now().AddDate(0, 1, 0), // a month from now
-		Secure:   true,
+		Secure:   false,
 		HttpOnly: true,
 	}