small performance and security changes

2026-02-19 18:18:15 +01:00
parent 2885a23544
commit 91d9fa3a21
5 changed files with 244 additions and 9 deletions
--- a/src/web/user/auth.py
+++ b/src/web/user/auth.py
@@ -229,7 +229,8 @@ def set_user_session(response: Response, session: UserSession, access_token: str
        value=session.to_cookie_value(),
        httponly=True,
        max_age=60 * 60 * 24 * 7,
-        samesite="lax"
+        samesite="lax",
+        secure=True,
    )