chore: Add httpOnly in cookies

builtbysuraj · Mar 2, 2024 · 9ffc18d · 9ffc18d
1 parent 02ecc93
commit 9ffc18d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/server/src/controller/user/login.controller.ts b/server/src/controller/user/login.controller.ts
@@ -32,6 +32,7 @@ export const loginUser = async (req, res) => {
     })
 
     res.cookie('token', token, {
+      httpOnly: true,
       secure: true,
       sameSite: 'none',
       maxAge: 24 * 60 * 60 * 1000,

diff --git a/server/src/controller/user/register.controller.ts b/server/src/controller/user/register.controller.ts
@@ -35,6 +35,7 @@ export const registerUser = async (req, res) => {
     })
 
     res.cookie('token', token, {
+      httpOnly: true,
       secure: true,
       sameSite: 'none',
       maxAge: 24 * 60 * 60 * 1000,