Commit d8a24be9 authored by Mickaël Desfrênes's avatar Mickaël Desfrênes
Browse files

add option for insecure cookie

parent 22215fe5

README.md

+1 −0
Original line number Diff line number Diff line
@@ -163,6 +163,7 @@ Démarrage simultané du service HTTP et des workers: 
- ```CIRCE_ENABLE_WEB_UI``` (```0```)

- ```CIRCE_WEB_UI_CRYPT_KEY``` (```"you should really change this"```)

- ```CIRCE_WEB_UI_REMOVE_USER_FILES_DELAY``` (```7200```)

- ```CIRCE_WEB_UI_SECURE_COOKIE``` (```1```)

- ```CIRCE_USE_AUTH``` (```1```)

- ```CIRCE_TRANSFORMATIONS_MODULE``` (```None```)

circe/__init__.py

+2 −1
Original line number Diff line number Diff line
@@ -32,7 +32,7 @@ import re 
import aiofiles

import argh



version = "0.0.47"

version = "0.0.48"



AUTH_DB_PATH = "{}/auth.db".format(CONFIG["CIRCE_WORKING_DIR"])
@@ -292,6 +292,7 @@ if CONFIG["CIRCE_ENABLE_WEB_UI"]: 
            response.add_cookie("sess", signed.decode("UTF-8"))

            response.cookies.get_cookie("sess").httponly = True

            response.cookies.get_cookie("sess").samesite = "Strict"

            response.cookies.get_cookie("sess").secure = CONFIG["CIRCE_WEB_UI_SECURE_COOKIE"]

            return response



    @server.route("/upload/", methods=["POST", "GET"])

circe/config.py

+2 −0
Original line number Diff line number Diff line
@@ -17,6 +17,7 @@ CONFIG = { 
    "CIRCE_USE_AUTH": True,

    "CIRCE_ACCESS_LOG": False,

    "CIRCE_ENABLE_WEB_UI": False,

    "CIRCE_WEB_UI_SECURE_COOKIE": True,

    "CIRCE_WEB_UI_CRYPT_KEY": "you should really change this",

    "CIRCE_WEB_UI_REMOVE_USER_FILES_DELAY": 7200,

    "CIRCE_TRANSFORMATIONS_MODULE": None,
@@ -35,6 +36,7 @@ for key in CONFIG.keys(): 
            "CIRCE_IMMEDIATE_MODE",

            "CIRCE_ENABLE_WEB_UI",

            "CIRCE_UPDATE_NOTIFY_ROUTE",

            "CIRCE_WEB_UI_SECURE_COOKIE",

        ]:

            CONFIG[key] = True if val == "1" else False

        elif key in ["CIRCE_PORT"]:

pyproject.toml

+1 −1
Original line number Diff line number Diff line 
[tool.poetry]

name = "circe-CERTIC"

readme = "README.md"

version = "0.0.47"

version = "0.0.48"

description = "Circe Server"

authors = ["Mickaël Desfrênes <mickael.desfrenes@unicaen.fr>"]

license = "CeCILL-B"