documentation/config/initializers/session_store.rb

mirror of https://github.com/mastodon/documentation
# Be sure to restart your server when you modify this file.

Rails.application.config.session_store :cookie_store, key: '_mastodon_session', secure: (ENV['LOCAL_HTTPS'] == 'true')
Initial commit 2016-02-20 22:53:20 +01:00			`# Be sure to restart your server when you modify this file.`

Make cookies https-only if LOCAL_HTTPS is true, set X-Frame-Options to DENY, add permissive CORS to API controllers 2016-11-02 12:57:14 +01:00			`Rails.application.config.session_store :cookie_store, key: '_mastodon_session', secure: (ENV['LOCAL_HTTPS'] == 'true')`