-
Notifications
You must be signed in to change notification settings - Fork 227
Making Cookies HTTPOnly #502
Comments
Please note that the recommended ODK server is now ODK Central and the core ODK team no longer maintains Aggregate. Have you tried changing that setting in
|
Yes. The generated cache.js just stops working altogether. Not sure why. It has references to |
One of the reasons why we are not able to use ODK Central is webhooks. We have built a pipeline around webhooks which is still not supported by Central. |
I would recommend searching the forum for setups similar to yours or posting if you don't find anything useful.
It would be helpful to know more about your workflow. We've discussed some possibilities in this area but will need to have more user input before we build anything. |
Software and hardware versions
macOS Docker Compose, Aggregate v2.0.5 [Self built WAR] behind NGINX reverse proxy
Problem description
Trying to make cookies secure by
proxy_cookie_path / "/; HTTPOnly; Secure";
But I see that
HTTPOnly
cannot be enabled due todoc.cookie
API being used internally to cache.Found the
context.xml
file which explicitly does not allow this. Is there a specific reason?The text was updated successfully, but these errors were encountered: