Skip to content
Snippets Groups Projects
Commit e979eaca authored by bcweaver's avatar bcweaver
Browse files

Setting 'secure' and 'httponly' simplesamlphp cookie flags

parent 07bc2aa1
No related branches found
No related tags found
No related merge requests found
......@@ -566,14 +566,14 @@
* through https. If the user can access the service through
* both http and https, this must be set to FALSE.
*/
'session.cookie.secure' => false,
'session.cookie.secure' => TRUE,
/*
* Options to override the default settings for php sessions.
*/
'session.phpsession.cookiename' => 'SimpleSAML',
'session.phpsession.savepath' => null,
'session.phpsession.httponly' => true,
'session.phpsession.httponly' => TRUE,
/*
* Option to override the default settings for the auth token cookie
......
......@@ -566,14 +566,14 @@
* through https. If the user can access the service through
* both http and https, this must be set to FALSE.
*/
'session.cookie.secure' => false,
'session.cookie.secure' => TRUE,
/*
* Options to override the default settings for php sessions.
*/
'session.phpsession.cookiename' => 'SimpleSAML',
'session.phpsession.savepath' => null,
'session.phpsession.httponly' => true,
'session.phpsession.httponly' => TRUE,
/*
* Option to override the default settings for the auth token cookie
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment