cookie: Set secure attribute

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/web/auth.py b/src/web/auth.py
index d9bb703ec8aff8d2fb3574003e66a9b9f27eb81c..d633a94b2e0603186f0450700c49469d7bba3d63 100644 (file)
--- a/src/web/auth.py
+++ b/src/web/auth.py
@@ -26,7 +26,7 @@ class AuthenticationMixin(CacheMixin):
 
                # Send session cookie to the client
                self.set_cookie("session_id", session_id,
-                       domain=self.request.host, expires=session_expires)
+                       domain=self.request.host, expires=session_expires, secure=True)
 
        def logout(self):
                session_id = self.get_cookie("session_id")