Merge pull request #307 from DigitalSlideArchive/http-only-default

Show how to use httponly cookies
DigitalSlideArchive · Dec 14, 2023 · fa9cc8e · fa9cc8e
2 parents 6405bd5 + 9b49f0b
commit fa9cc8e
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 0 deletions.
diff --git a/devops/dsa/docker-compose.yml b/devops/dsa/docker-compose.yml
@@ -23,6 +23,8 @@ services:
     environment:
       DSA_USER: ${DSA_USER:-}
       DSA_PROVISION_YAML: ${DSA_PROVISION_YAML:-/opt/digital_slide_archive/devops/dsa/provision.yaml}
+      # You can also set girder settings here:
+      # GIRDER_SETTING_CORE_HTTP_ONLY_COOKIES: true
     restart: unless-stopped
     # Set DSA_PORT to expose the interface on another port (default 8080).
     ports:

diff --git a/devops/dsa/provision.py b/devops/dsa/provision.py
@@ -416,6 +416,7 @@ def merge_default_opts(opts):
         'worker.api_url': 'http://girder:8080/api/v1',
         'worker.direct_path': True,
         'core.brand_name': 'Digital Slide Archive',
+        # 'core.http_only_cookies': True,
         'histomicsui.webroot_path': 'histomics',
         'histomicsui.alternate_webroot_path': 'histomicstk',
         'histomicsui.delete_annotations_after_ingest': True,

diff --git a/devops/dsa/provision.yaml b/devops/dsa/provision.yaml
@@ -63,6 +63,7 @@ settings:
   worker.api_url: "http://girder:8080/api/v1"
   worker.direct_path: True
   core.brand_name: "Digital Slide Archive"
+  # core.http_only_cookies: True
   histomicsui.webroot_path: "histomics"
   histomicsui.alternate_webroot_path: "histomicstk"
   histomicsui.delete_annotations_after_ingest: True