fix(session-storage): add typing and trust proxy setting (#9725)
Added explicit typing for session storage options to improve type safety. Enabled 'trust proxy' to ensure proper client IP and protocol detection behind proxies. These changes improve security and reliability in session handling.
This commit is contained in:
@ -14,10 +14,11 @@ export const getSessionStorageOptions = (
|
||||
|
||||
const SERVER_URL = environmentService.get('SERVER_URL');
|
||||
|
||||
const sessionStorage = {
|
||||
const sessionStorage: session.SessionOptions = {
|
||||
secret: environmentService.get('SESSION_STORE_SECRET'),
|
||||
resave: false,
|
||||
saveUninitialized: false,
|
||||
proxy: true,
|
||||
cookie: {
|
||||
secure: !!(SERVER_URL && SERVER_URL.startsWith('https')),
|
||||
maxAge: 1000 * 60 * 30, // 30 minutes
|
||||
|
||||
Reference in New Issue
Block a user