Merge pull request #339 from nemozak1/develop

Add Secure Session Cookies
OpenBankProject · Nov 9, 2023 · 0be2a70 · 0be2a70
2 parents 1f95eb1 + a1023ba
commit 0be2a70
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/apimanager/apimanager/settings.py b/apimanager/apimanager/settings.py
@@ -284,6 +284,13 @@
 # Always save session$
 SESSION_SAVE_EVERY_REQUEST = True
 
+# Session Cookie Settings
+SESSION_COOKIE_SECURE = True
+SESSION_COOKIE_HTTPONLY = True
+SESSION_COOKIE_AGE = 300
+SESSION_ENGINE = "django.contrib.sessions.backends.signed_cookies"
+
+
 # Paths on API_HOST to OAuth
 OAUTH_TOKEN_PATH = '/oauth/initiate'
 OAUTH_AUTHORIZATION_PATH = '/oauth/authorize'