mARTin-B78/My-Weekly-ToDo-List
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(next-auth): enforce cookie policies for Reverse Proxy compatibility

Browse Source
This commit is contained in:
mARTin 2026-03-04 00:27:11 +01:00
parent 00ef31186d
commit c15cb51845
1 changed files with 49 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

49
src/lib/auth.ts
View File

@ -121,5 +121,54 @@ export const authOptions: NextAuthOptions = {
return session;
}
},
useSecureCookies: process.env.NODE_ENV === "production",
cookies: {
sessionToken: {
name: process.env.NODE_ENV === "production" ? "__Secure-next-auth.session-token" : "next-auth.session-token",
options: {
httpOnly: true,
sameSite: 'lax',
path: '/',
secure: process.env.NODE_ENV === "production"
}
},
callbackUrl: {
name: process.env.NODE_ENV === "production" ? "__Secure-next-auth.callback-url" : "next-auth.callback-url",
options: {
sameSite: 'lax',
path: '/',
secure: process.env.NODE_ENV === "production"
}
},
csrfToken: {
name: process.env.NODE_ENV === "production" ? "__Host-next-auth.csrf-token" : "next-auth.csrf-token",
options: {
httpOnly: true,
sameSite: 'lax',
path: '/',
secure: process.env.NODE_ENV === "production"
}
},
pkceCodeVerifier: {
name: process.env.NODE_ENV === "production" ? "__Secure-next-auth.pkce.code_verifier" : "next-auth.pkce.code_verifier",
options: {
httpOnly: true,
sameSite: 'lax',
path: '/',
secure: process.env.NODE_ENV === "production",
maxAge: 900
}
},
state: {
name: process.env.NODE_ENV === "production" ? "__Secure-next-auth.state" : "next-auth.state",
options: {
httpOnly: true,
sameSite: 'lax',
path: '/',
secure: process.env.NODE_ENV === "production",
maxAge: 900
}
},
},
secret: process.env.NEXTAUTH_SECRET
};