Ailur-Archives
/
burgercat
Archived
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: Ailur-Archives:e870c180b9ea7ad76e73dde12c91093f5f6463d3
Branches Tags
Ailur-Archives:main
...
compare: Ailur-Archives:45c5af1757268f8678aeba998509190203fb47fb
Branches Tags
Ailur-Archives:main

2 Commits
e870c180b9 ... 45c5af1757

Author SHA1 Message Date
Tracker-Friendly 45c5af1757 Merge branch 'main' of hectabit.org:HectaBit/burgercat 2024-05-16 16:48:32 +01:00
Tracker-Friendly 0bfad634d8 Fixed migration and made cookies more secure 2024-05-16 16:48:22 +01:00
3 changed files with 5 additions and 5 deletions
Show Stats Expand all files Collapse all files

4
main
View File

@ -663,8 +663,8 @@ async def login():
conn.close()
response = Response("""<script>window.location.href = "/oauth";</script>""")
response.set_cookie("session_DO_NOT_SHARE", randomCharacters)
response.set_cookie("legacy_migrate", "1")
response.set_cookie("session_DO_NOT_SHARE", randomCharacters, samesite="Strict", secure=True)
response.set_cookie("legacy_migrate", "1", samesite="Strict", secure=True)
return response
#resp = await make_response(redirect("/"))

2
templates/migrate.html
View File

@ -121,7 +121,7 @@
.then((response) => {
async function doStuff2() {
if (response.status == 200) {
document.cookie = 'legacy_migrate=; Max-Age=0; path=/;"
document.cookie = "legacy_migrate=; Max-Age=0; path=/;"
window.location.replace("/")
} else {
document.getElementById("text").innerText = "Failed: " + key["error"]

4
templates/oauth.html
View File

@ -59,7 +59,7 @@
function cuser_authorize() {
document.cookie = "prefuser" + "=" + window.prompt("Choose your custom username (cannot be longer than 20 characters)") + "; expires=Session" + "; path=/" + "; samesite=Strict";
document.cookie = "prefuser" + "=" + window.prompt("Choose your custom username (cannot be longer than 20 characters)") + "; expires=Session" + "; path=/" + "; samesite=Strict; secure=true;";
authorize()
}
@ -137,7 +137,7 @@
async function doStuff2() {
let key = await response.json()
if (response.status == 200) {
document.cookie = "session_DO_NOT_SHARE" + "=" + (key["key"] || "") + "; expires=Session" + "; path=/" + "; samesite=Strict";
document.cookie = "session_DO_NOT_SHARE" + "=" + (key["key"] || "") + "; expires=Session" + "; path=/" + "; samesite=Strict; secure=true;"
window.location.replace("/")
} else if (response.status == 422) {
document.getElementById("text").innerText = "Username taken. Migrate or choose a new custom username!"