set cookie attributes for security

Author: commit111

app/app.py

@@ -7,6 +7,9 @@
 import os
 
 app.config['SECRET_KEY'] = os.getenv('SECRET_KEY')
+app.config['SESSION_COOKIE_HTTPONLY'] = True
+app.config['SESSION_COOKIE_SECURE'] = bool(os.getenv('SESSION_COOKIE_SECURE'))
+
 csrf = CSRFProtect(app)
 
 @app.route('/', methods=['GET', 'POST'])

compose.dev.yaml

@@ -11,6 +11,7 @@ services:
     environment:
       FLASK_APP: app.py
       SECRET_KEY: supersecret
+      SESSION_COOKIE_SECURE: 0
       OPENAI_API_KEY: ${OPENAI_API_KEY} # Set your OpenAI API key here or in the .env file
     command: flask run --host=0.0.0.0
     deploy:

compose.yaml

@@ -14,6 +14,7 @@ services:
     environment:
       FLASK_APP: app.py
       SECRET_KEY: 
+      SESSION_COOKIE_SECURE: 1
       OPENAI_API_KEY: ${OPENAI_API_KEY} # Set your OpenAI API key here or in the .env file
     command: uwsgi --http 0.0.0.0:5000 --wsgi-file app.py --callable app --processes 4 --threads 2
     deploy: