Secure cookies in production

2020-08-21 22:53:15 +02:00
parent 444cdff9a3
commit 1374bbae9e
1 changed files with 1 additions and 1 deletions
--- a/packages/medusa/src/loaders/express.js
+++ b/packages/medusa/src/loaders/express.js
@@ -21,7 +21,7 @@ export default async ({ app }) => {
      activeDuration: 1000 * 60 * 5,
      cookie: {
        httpOnly: true,
-        secure: false,
+        secure: process.env.NODE_ENV === "production",
      },
    })
  )