diff --git a/middleware/session.go b/middleware/session.go index 9709e19..d5b1666 100644 --- a/middleware/session.go +++ b/middleware/session.go @@ -24,6 +24,7 @@ func Session(secret string) gin.HandlerFunc { } else { Store = memstore.NewStore([]byte(secret)) } + // Also set Secure: true if using SSL, you should though Store.Options(sessions.Options{HttpOnly: true, MaxAge: 7 * 86400, Path: "/"}) return sessions.Sessions("cloudreve-session", Store)