From 8237263e25838df3323ad9d2d467e94d1140c1fa Mon Sep 17 00:00:00 2001 From: Juan Calderon-Perez <835733+gaby@users.noreply.github.com> Date: Thu, 29 Jun 2023 10:10:27 -0400 Subject: [PATCH] Support for using Secure Sessions (#71) * Support for using secure sessions * Update github actions * Add missing commas * Use secure headers --- .github/workflows/on-pr-submit.yaml | 4 ++-- .github/workflows/on-release-tag.yml | 4 ++-- gdash/__main__.py | 3 +++ 3 files changed, 7 insertions(+), 4 deletions(-) diff --git a/.github/workflows/on-pr-submit.yaml b/.github/workflows/on-pr-submit.yaml index c209241..2d9bccf 100644 --- a/.github/workflows/on-pr-submit.yaml +++ b/.github/workflows/on-pr-submit.yaml @@ -16,9 +16,9 @@ jobs: devel-tag-push: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 - name: Use Node.js 18.x - uses: actions/setup-node@v1 + uses: actions/setup-node@v3 with: node-version: 18.x - name: Build diff --git a/.github/workflows/on-release-tag.yml b/.github/workflows/on-release-tag.yml index 52054cf..b9ef26c 100644 --- a/.github/workflows/on-release-tag.yml +++ b/.github/workflows/on-release-tag.yml @@ -15,9 +15,9 @@ jobs: name: Push to pypi runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 - name: Set up Python - uses: actions/setup-python@v1 + uses: actions/setup-python@v4 with: python-version: '3.x' - name: Install dependencies diff --git a/gdash/__main__.py b/gdash/__main__.py index f80f40d..c28b2fc 100644 --- a/gdash/__main__.py +++ b/gdash/__main__.py @@ -23,6 +23,9 @@ "/": { "tools.staticdir.on": True, "tools.sessions.on": True, + "tools.sessions.secure" = True, + "tools.sessions.httponly" = True, + "tools.secureheaders.on" = True, "tools.staticdir.dir": os.path.join( os.path.dirname(os.path.abspath(__file__)), "ui" ),