SessionExtension: option session.cookieSecure is deprecated, http.cookieSecure is used (BC break)

Author: dg

src/Bridges/HttpDI/SessionExtension.php

@@ -64,8 +64,9 @@ public function loadConfiguration()
 		if (($config->cookieDomain ?? null) === 'domain') {
 			$config->cookieDomain = $builder::literal('$this->getByType(Nette\Http\IRequest::class)->getUrl()->getDomain(2)');
 		}
-		if (($config->cookieSecure ?? null) === 'auto') {
-			$config->cookieSecure = $builder::literal('$this->getByType(Nette\Http\IRequest::class)->isSecured()');
+		if (isset($config->cookieSecure)) {
+			trigger_error("The item 'session › cookieSecure' is deprecated, use 'http › cookieSecure' (it has default value 'auto').", E_USER_DEPRECATED);
+			unset($config->cookieSecure);
 		}
 		if ($config->cookieSamesite === true) {
 			trigger_error("In 'session › cookieSamesite' replace true with 'Lax'.", E_USER_DEPRECATED);

tests/Http.DI/SessionExtension.config.phpt

@@ -21,10 +21,12 @@ $compiler->addExtension('session', new SessionExtension(false, PHP_SAPI === 'cli
 
 $loader = new DI\Config\Loader;
 $config = $loader->load(Tester\FileMock::create('
+foo:
+	cookieSecure: yes
+
 session:
 	cookiePath: /x
 	cookieDomain: domain
-	cookieSecure: yes
 	cookieSamesite: Lax
 
 services: