Merge pull request #1023 from mvz/secure-session-cookie

Force session cookie to be secure in production
publify · Oct 10, 2021 · 8c39915 · 8c39915
2 parents 5d3f4d1 + 4f70975
commit 8c39915
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb
@@ -2,4 +2,6 @@
 
 # Be sure to restart your server when you modify this file.
 
-Rails.application.config.session_store :active_record_store, key: "_publify_blog_session"
+Rails.application.config.session_store(:active_record_store,
+                                       key: "_publify_blog_session",
+                                       secure: Rails.env.production?)