diff --git a/apps/chat/views/chat.py b/apps/chat/views/chat.py index 3951451efd1..cfbef93439d 100644 --- a/apps/chat/views/chat.py +++ b/apps/chat/views/chat.py @@ -116,14 +116,13 @@ def post(self, request: Request): "Access-Control-Allow-Methods": "POST", "Access-Control-Allow-Headers": "Origin,Content-Type,Cookie,Accept,Token"} ) - secure = request.is_secure() response.set_cookie( 'mk_file_auth', value=f_token, max_age=7 * 24 * 3600, path=f'{CONFIG.get_chat_path()}/{request.data.get("access_token")}', domain=None, - secure=secure, + secure=request.scheme == "https", httponly=True, samesite="None", ) diff --git a/apps/users/views/login.py b/apps/users/views/login.py index 179d42c868c..a93f43b6796 100644 --- a/apps/users/views/login.py +++ b/apps/users/views/login.py @@ -48,14 +48,13 @@ class LoginView(APIView): def post(self, request: Request): token, f_token = LoginSerializer().login(request.data) response = result.success(token) - secure = request.is_secure() response.set_cookie( 'mk_file_auth', value=f_token, max_age=7 * 24 * 3600, path=f'{CONFIG.get_admin_path()}', domain=None, - secure=secure, + secure=request.scheme == "https", httponly=True, samesite="None", )