fix: use secure cookie

olemathias · Mar 17, 2023 · f9a70aa · f9a70aa
1 parent d2d002c
commit f9a70aa
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/.env.example b/.env.example
@@ -5,5 +5,5 @@ KEYCLOAK_REALM=wannabe5-dev
 NEXTAUTH_SECRET=lol123456789
 NEXTAUTH_URL=http://localhost:3000
 
-BASE_URL=http://localhost:3000
+URL=http://localhost:3000
 API_URL=http://127.0.0.1:8000/api
diff --git a/src/pages/_app.js b/src/pages/_app.js
@@ -47,14 +47,19 @@ App.propTypes = {
 };
 
 App.getInitialProps = async (appContext) => {
+  const cookieName =
+    process.env.NODE_ENV === "production"
+      ? "__Secure-next-auth.session-token"
+      : "next-auth.session-token";
+
   // Server Side
   if (appContext.ctx.req) {
     try {
       const response = await axios({
         method: "GET",
         url: `${publicRuntimeConfig.url}/api/auth/user`,
         headers: {
-          Cookie: `next-auth.session-token=${appContext.ctx.req.cookies["next-auth.session-token"]}`,
+          Cookie: `${cookieName}=${appContext.ctx.req.cookies[cookieName]}`,
         },
       });
       return { user: response?.data?.user };