Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set cookie default to httpOnly: false #683

Merged
merged 1 commit into from
Nov 10, 2023

Conversation

silentworks
Copy link
Contributor

What kind of change does this PR introduce?

Bug fix

What is the current behavior?

The browser cookie is not set to httpOnly: false which breaks the ssr package behaviour

What is the new behavior?

The browser cookie is set to httpOnly: false

Additional context

Fixes #681

Copy link
Contributor

@hf hf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ouch.

@silentworks silentworks merged commit 1e079c3 into main Nov 10, 2023
3 checks passed
@silentworks silentworks deleted the feat/cookie-default-http-only branch November 10, 2023 19:20
@ervasive
Copy link

Should this change be reflected in the docs, by editing this sentence Your web application cannot access these cookies, nor will these cookies be sent to your application's server. ?

@silentworks
Copy link
Contributor Author

Should this change be reflected in the docs, by editing this sentence Your web application cannot access these cookies, nor will these cookies be sent to your application's server. ?

No as this is referring to different cookies. Not the ones set by the @supabase/ssr package. So that sentance is still true.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
3 participants