From ad34a297fdec7337f686f9a10501ae6438ef67cb Mon Sep 17 00:00:00 2001 From: Neil Lalonde Date: Fri, 31 Jan 2014 14:17:14 -0500 Subject: [PATCH] Try secure: true again --- config/initializers/session_store.rb | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb index 2a14105c920..62cb121a056 100644 --- a/config/initializers/session_store.rb +++ b/config/initializers/session_store.rb @@ -1,6 +1,9 @@ # Be sure to restart your server when you modify this file. -Discourse::Application.config.session_store :cookie_store, key: '_forum_session' +Discourse::Application.config.session_store :cookie_store, { + key: '_forum_session', + secure: SiteSetting.use_https +} # Use the database for sessions instead of the cookie-based default, # which shouldn't be used to store highly confidential information