Skip to content

Commit ae0b3e1

Browse files
committed
1.4.2 - fixing __Host- cookie path
1 parent 677d7e7 commit ae0b3e1

3 files changed

Lines changed: 7 additions & 3 deletions

File tree

package-lock.json

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "awesome-node-auth",
3-
"version": "1.4.1",
3+
"version": "1.4.2",
44
"description": "Database-agnostic JWT authentication and communication bus for Node.js",
55
"main": "dist/index.js",
66
"scripts": {

src/services/token.service.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -66,6 +66,8 @@ export class TokenService {
6666
const opts = { ...commonOpts, ...extraOpts };
6767
if (finalName.startsWith('__Host-')) {
6868
delete opts.domain;
69+
opts.path = '/'; // __Host- requires path=/
70+
opts.secure = true; // __Host- requires Secure
6971
} else {
7072
opts.domain = config.cookieOptions?.domain;
7173
}
@@ -101,6 +103,8 @@ export class TokenService {
101103
};
102104
if (name.startsWith('__Host-')) {
103105
delete opts.domain;
106+
opts.path = '/'; // __Host- requires path=/
107+
opts.secure = true; // __Host- requires Secure
104108
} else {
105109
opts.domain = config.cookieOptions?.domain;
106110
}

0 commit comments

Comments
 (0)