diff --git a/packages/medusa/src/loaders/express.js b/packages/medusa/src/loaders/express.js index eca1b1038b..488942a2b0 100644 --- a/packages/medusa/src/loaders/express.js +++ b/packages/medusa/src/loaders/express.js @@ -19,8 +19,10 @@ export default async ({ app }) => { secret: config.cookieSecret, duration: 24 * 60 * 60 * 1000, activeDuration: 1000 * 60 * 5, + proxy: true, cookie: { httpOnly: true, + secureProxy: true, secure: process.env.NODE_ENV === "production", }, })