fix(api): csrf over http in development (#39114)

2020-06-22 12:27:20 +02:00
parent 0116afd18b
commit 5a80b83579
1 changed files with 1 additions and 1 deletions
--- a/api-server/server/middlewares/csurf.js
+++ b/api-server/server/middlewares/csurf.js
@ -5,7 +5,7 @@ export default function() {
    cookie: {
      domain: process.env.COOKIE_DOMAIN || 'localhost',
      sameSite: 'strict',
-      secure: true
+      secure: process.env.FREECODECAMP_NODE_ENV === 'production'
    }
  });
  return function csrf(req, res, next) {