Discourse/discourse
Discourse/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-09-06 09:10:25 +08:00
Code Packages Activity Actions 11

Merge pull request #215 from tms/auth-token-changes

Browse source 
Sign the auth token cookie and make it httpOnly
This commit is contained in:
Robin Ward 2013-02-21 07:14:15 -08:00
commit 84cb08e035
3 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
spec/controllers/session_controller_spec.rb
View file

@ -38,7 +38,7 @@ describe SessionController do
end
it 'sets a cookie with the auth token' do
cookies[:_t].should == user.auth_token
cookies.signed[:_t].should == user.auth_token
end
end