session: rename cookie to 'cista', add __Host- prefix on HTTPS

2026-04-27 03:56:07 +00:00
parent 1927c24053
commit 575df1214b
4 changed files with 22 additions and 11 deletions
@@ -96,7 +96,7 @@ async def persist_auth_session(req, res):
    existing = getattr(req.ctx, "session", None)
    if isinstance(existing, dict) and existing.get("username") == username:
        return
-    session.create(res, username, secure=req.scheme == "https")
+    session.create(req, res, username)


 # Register either SSO proxy or built-in auth routes based on PASKIA_BACKEND_URL