Level up the cookie security (GH-29)

Author: ArtyomVancyan

src/fastapi_oauth2/__init__.py

@@ -1 +1 @@
-__version__ = "1.0.0-beta.2"
+__version__ = "1.0.0-beta.3"

src/fastapi_oauth2/core.py

@@ -132,7 +132,8 @@ async def token_redirect(self, request: Request, **kwargs) -> RedirectResponse:
             value=f"Bearer {access_token}",
             max_age=request.auth.expires,
             expires=request.auth.expires,
-            httponly=request.auth.http,
+            secure=not request.auth.http,
+            httponly=True,
         )
         return response