Use secure remember_me cookies

hulloitskai · Jan 4, 2025 · 0cbed46 · 0cbed46
1 parent 8e6100a
commit 0cbed46
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 9 deletions.
diff --git a/config/initializers/devise.rb b/config/initializers/devise.rb
@@ -177,7 +177,9 @@
 
   # Options to be passed to the created cookie. For instance, you can set
   # secure: true in order to force SSL only cookies.
-  # config.rememberable_options = {}
+  config.rememberable_options = {
+    secure: Rails.env.production?,
+  }
 
   # ==> Configuration for :validatable
   # Range for password length.

diff --git a/config/initializers/warden.rb b/config/initializers/warden.rb
@@ -1,4 +1,4 @@
-# typed: strict
+# typed: true
 # frozen_string_literal: true
 
 Warden::Manager.after_set_user do |user|
@@ -9,11 +9,4 @@
     level: "info",
   )
   Sentry.add_breadcrumb(crumb)
-  # scope = opts.fetch(:scope)
-  # auth.cookies.signed["#{scope}.id"] = user.id
 end
-
-# Warden::Manager.before_logout do |_, auth, opts|
-#   scope = opts.fetch(:scope)
-#   auth.cookies.signed["#{scope}.id"] = nil
-# end