diff --git a/src/routes/session_parser.ts b/src/routes/session_parser.ts index 90f415121..b99882d0b 100644 --- a/src/routes/session_parser.ts +++ b/src/routes/session_parser.ts @@ -2,6 +2,7 @@ import session from "express-session"; import sessionFileStore from "session-file-store"; import sessionSecret from "../services/session_secret.js"; import dataDir from "../services/data_dir.js"; +import config from "../services/config.js"; const FileStore = sessionFileStore(session); const sessionParser = session({ @@ -9,7 +10,7 @@ const sessionParser = session({ resave: false, // true forces the session to be saved back to the session store, even if the session was never modified during the request. saveUninitialized: false, // true forces a session that is "uninitialized" to be saved to the store. A session is uninitialized when it is new but not modified. cookie: { - // path: "/", + path: config.Cookies.cookiePath, httpOnly: true, maxAge: 24 * 60 * 60 * 1000 // in milliseconds },