[couchdb] branch delete-session-cookie-samesite-3.x created (now 0bf4738)

[rn...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rnewson pushed a change to branch delete-session-cookie-samesite-3.x
in repository https://gitbox.apache.org/repos/asf/couchdb.git.


      at 0bf4738  Add SameSite setting when clearing session cookie

This branch includes the following new commits:

     new 3f99c4e  [unrelated] improve erlang_ls.config
     new 0bf4738  Add SameSite setting when clearing session cookie

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

[couchdb] 02/02: Add SameSite setting when clearing session cookie

[rn...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rnewson pushed a commit to branch delete-session-cookie-samesite-3.x
in repository https://gitbox.apache.org/repos/asf/couchdb.git

commit 0bf4738cc7f0464dd13051fb553e49e8f133fdeb
Author: Robert Newson <rn...@apache.org>
AuthorDate: Mon Dec 6 13:48:25 2021 +0000

    Add SameSite setting when clearing session cookie
---
 src/couch/src/couch_httpd_auth.erl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/couch/src/couch_httpd_auth.erl b/src/couch/src/couch_httpd_auth.erl
index 7bcb85f..757f055 100644
--- a/src/couch/src/couch_httpd_auth.erl
+++ b/src/couch/src/couch_httpd_auth.erl
@@ -509,7 +509,7 @@ handle_session_req(#httpd{method = 'DELETE'} = Req, _AuthModule) ->
         "AuthSession",
         "",
         [{path, "/"}] ++
-            cookie_domain() ++ cookie_scheme(Req)
+            cookie_domain() ++ cookie_scheme(Req) ++ same_site()
     ),
     {Code, Headers} =
         case couch_httpd:qs_value(Req, "next", nil) of

[couchdb] 01/02: [unrelated] improve erlang_ls.config

[rn...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rnewson pushed a commit to branch delete-session-cookie-samesite-3.x
in repository https://gitbox.apache.org/repos/asf/couchdb.git

commit 3f99c4ed13c46803844b80b3ad94fb6449b6e808
Author: Robert Newson <rn...@apache.org>
AuthorDate: Tue Sep 21 12:37:07 2021 +0100

    [unrelated] improve erlang_ls.config
---
 erlang_ls.config | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/erlang_ls.config b/erlang_ls.config
index 3d2fc9e..94483cf 100644
--- a/erlang_ls.config
+++ b/erlang_ls.config
@@ -1,2 +1,5 @@
+apps_dirs:
+    - "src/*"
 include_dirs:
-    - "src/"
+    - "src"
+    - "src/*/include"