Fix Beaker cookie-based sessions

- Resolves #94.
dativebase · May 27, 2020 · 1ce3e90 · 1ce3e90
1 parent bcfb856
commit 1ce3e90
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/onlinelinguisticdatabase/config/middleware.py b/onlinelinguisticdatabase/config/middleware.py
@@ -150,7 +150,11 @@ def make_app(global_conf, full_stack=False, static_files=True, **app_conf):
 
     # Routing/Session Middleware
     app = RoutesMiddleware(app, config['routes.map'], singleton=False)
-    app = SessionMiddleware(app, config)
+    app = SessionMiddleware(
+        app,
+        config,
+        samesite='None',
+        secure=True)
 
     # At some point it seems that Pylons converts the Content-Type of any
     # response without a 200 OK status to 'text/html; charset=utf-8'.  Well

diff --git a/setup.py b/setup.py
@@ -99,6 +99,7 @@ def fixer(match):
         "Topic :: Education"
     ],
     install_requires=[
+        "Beaker==1.10.0",
         "WebTest<2.0",  # WebTest 2.0.1 requires WebOb>=1.2 and OLD needs WebOb <=1.1.1 -- conflict
         "Pylons==1.0",
         "FormEncode==1.2.4",    # vs. >= 1.2.5 include changes that break the OLD