feature/Add trust proxy in production environment

This commit is contained in:
Marko Milić 2023-12-14 16:36:44 +01:00
parent 86d627d30c
commit 22f6715273
2 changed files with 16 additions and 11 deletions

View File

@ -1,6 +1,6 @@
{
"name": "api-explorer",
"version": "1.0.4",
"version": "1.0.5",
"private": true,
"scripts": {
"dev": "vite & ts-node server/app.ts",

View File

@ -12,17 +12,22 @@ const host = process.env.VITE_OBP_EXPLORER_HOST
const httpsOrNot = host ? host.indexOf("https://") == 0 ? true : false : true
app.use(express.json())
let sessionObject = {
secret: process.env.VITE_OPB_SERVER_SESSION_PASSWORD,
resave: false,
saveUninitialized: true,
cookie: {
httpOnly: true,
secure: false,
maxAge: 300*1000, // 5 minutes in milliseconds
}
}
if (app.get('env') === 'production') {
app.set('trust proxy', 1) // trust first proxy
sessionObject.cookie.secure = true // serve secure cookies
}
app.use(
session({
secret: process.env.VITE_OPB_SERVER_SESSION_PASSWORD,
resave: false,
saveUninitialized: true,
cookie: {
httpOnly: true,
secure: false,
maxAge: 300*1000, // 5 minutes in milliseconds
}
})
session(sessionObject)
)
useContainer(Container)