Fixed issue with refresh token
All checks were successful
Chore App Build, Test, and Push Docker Images / build-and-push (push) Successful in 2m9s

This commit is contained in:
2026-03-02 16:01:54 -05:00
parent 76fef8c688
commit 82ac820c67

View File

@@ -86,14 +86,14 @@ def _set_auth_cookies(resp, access_token: str, raw_refresh_token: str):
'refresh_token', raw_refresh_token, 'refresh_token', raw_refresh_token,
httponly=True, secure=True, samesite='Strict', httponly=True, secure=True, samesite='Strict',
max_age=expiry_days * 24 * 3600, max_age=expiry_days * 24 * 3600,
path='/auth', path='/api/auth',
) )
def _clear_auth_cookies(resp): def _clear_auth_cookies(resp):
"""Clear both access and refresh token cookies.""" """Clear both access and refresh token cookies."""
resp.set_cookie('access_token', '', expires=0, httponly=True, secure=True, samesite='Strict') resp.set_cookie('access_token', '', expires=0, httponly=True, secure=True, samesite='Strict')
resp.set_cookie('refresh_token', '', expires=0, httponly=True, secure=True, samesite='Strict', path='/auth') resp.set_cookie('refresh_token', '', expires=0, httponly=True, secure=True, samesite='Strict', path='/api/auth')
def _purge_expired_tokens(user_id: str): def _purge_expired_tokens(user_id: str):