From 2152ab37f93ee3f15e3bdfdc9f376fc6a01fe1dd Mon Sep 17 00:00:00 2001 From: Heath Stewart Date: Wed, 11 Mar 2026 21:10:07 -0700 Subject: [PATCH] Make sequoia-subscribe cookie Secure Fixes issue #21 --- packages/cli/src/components/sequoia-subscribe.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/cli/src/components/sequoia-subscribe.js b/packages/cli/src/components/sequoia-subscribe.js index 0244a4c..f5f2f0a 100644 --- a/packages/cli/src/components/sequoia-subscribe.js +++ b/packages/cli/src/components/sequoia-subscribe.js @@ -161,7 +161,7 @@ function storeSubscriberDid(did) { const expires = new Date( Date.now() + 365 * 24 * 60 * 60 * 1000, ).toUTCString(); - document.cookie = `sequoia_did=${encodeURIComponent(did)}; expires=${expires}; path=/; SameSite=Lax`; + document.cookie = `sequoia_did=${encodeURIComponent(did)}; Expires=${expires}; Path=/; SameSite=Lax; Secure`; } catch { // Cookie write may fail in some embedded contexts } @@ -201,7 +201,7 @@ function getStoredSubscriberDid() { function clearSubscriberDid() { try { document.cookie = - "sequoia_did=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; SameSite=Lax"; + "sequoia_did=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/; SameSite=Lax; Secure"; } catch { // ignore } -- 2.51.2