fix: Development logins

concord-consortium · Dec 22, 2023 · 80ac93f · 80ac93f
1 parent 842782d
commit 80ac93f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/rails/config/application.rb b/rails/config/application.rb
@@ -177,7 +177,7 @@ class Application < Rails::Application
 
     # Specify cookies SameSite protection level: either :none, :lax, or :strict.
     # When running tests, we want to use lax protection (breaks cucumber tests otherwise)
-    same_site_protection = (Rails.env.cucumber? || Rails.env.test? || Rails.env.feature_test?) ? :lax : :none
+    same_site_protection = (Rails.env.development? || Rails.env.cucumber? || Rails.env.test? || Rails.env.feature_test?) ? :lax : :none
     config.action_dispatch.cookies_same_site_protection = same_site_protection
 
     # Allow requests from any domain (skips DNS rebinding attack guards)

diff --git a/rails/config/initializers/session_store.rb b/rails/config/initializers/session_store.rb
@@ -7,5 +7,5 @@
 # (create the session table with "rails generate session_migration")
 
 # For testing environments, we don't use SSL and can't set cookie to secure.
-secure = !(Rails.env.cucumber? || Rails.env.test? || Rails.env.feature_test?)
+secure = !(Rails.env.development? || Rails.env.cucumber? || Rails.env.test? || Rails.env.feature_test?)
 RailsPortal::Application.config.session_store :active_record_store, :key => '_rails_portal_session', secure: secure