From a451f398a3f9666de84a0951b6c1c4be8864c251 Mon Sep 17 00:00:00 2001 From: Pengfei73 <91525851+Pengfei73@users.noreply.github.com> Date: Mon, 4 Jul 2022 21:37:03 +0800 Subject: [PATCH] FIX: After SessionRegenerateID, beegosessionID cookie's secure flag is missing (#5007) - Add cookie.Secure, cookie.Domain, cookie.SameSite --- session/session.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/session/session.go b/session/session.go index b770473c..024c5eef 100644 --- a/session/session.go +++ b/session/session.go @@ -328,6 +328,9 @@ func (manager *Manager) SessionRegenerateID(w http.ResponseWriter, r *http.Reque cookie.Value = url.QueryEscape(sid) cookie.HttpOnly = true cookie.Path = "/" + cookie.Secure = manager.isSecure(r) + cookie.Domain = manager.config.Domain + cookie.SameSite = manager.config.CookieSameSite } if manager.config.CookieLifeTime > 0 { cookie.MaxAge = manager.config.CookieLifeTime