Skip to content

Commit 473b052

Browse files
authored
chore: auth providers: increase CSRF cookie expiry to 30m (#515)
Signed-off-by: Grant Linville <[email protected]>
1 parent fe3d276 commit 473b052

File tree

2 files changed

+2
-0
lines changed

2 files changed

+2
-0
lines changed

github-auth-provider/main.go

+1
Original file line numberDiff line numberDiff line change
@@ -92,6 +92,7 @@ func main() {
9292
oauthProxyOpts.Cookie.Name = "obot_access_token"
9393
oauthProxyOpts.Cookie.Secret = string(cookieSecret)
9494
oauthProxyOpts.Cookie.Secure = strings.HasPrefix(opts.ObotServerURL, "https://")
95+
oauthProxyOpts.Cookie.CSRFExpire = 30 * time.Minute
9596
oauthProxyOpts.Templates.Path = os.Getenv("GPTSCRIPT_TOOL_DIR") + "/../auth-providers-common/templates"
9697
oauthProxyOpts.RawRedirectURL = opts.ObotServerURL + "/"
9798
if opts.AuthEmailDomains != "" {

google-auth-provider/main.go

+1
Original file line numberDiff line numberDiff line change
@@ -70,6 +70,7 @@ func main() {
7070
oauthProxyOpts.Cookie.Name = "obot_access_token"
7171
oauthProxyOpts.Cookie.Secret = string(bytes.TrimSpace(cookieSecret))
7272
oauthProxyOpts.Cookie.Secure = strings.HasPrefix(opts.ObotServerURL, "https://")
73+
oauthProxyOpts.Cookie.CSRFExpire = 30 * time.Minute
7374
oauthProxyOpts.Templates.Path = os.Getenv("GPTSCRIPT_TOOL_DIR") + "/../auth-providers-common/templates"
7475
oauthProxyOpts.RawRedirectURL = opts.ObotServerURL + "/"
7576
if opts.AuthEmailDomains != "" {

0 commit comments

Comments
 (0)