feat: wire CSRF middleware and harden session cookie

This commit is contained in:
Johan Lundberg 2026-02-19 13:45:58 +01:00
parent b5ea9950a2
commit d1f2b39cb6
No known key found for this signature in database
GPG key ID: A6C152738D03C7D1
4 changed files with 37 additions and 3 deletions

View file

@ -9,7 +9,7 @@ from porchlight.config import Settings
@pytest.fixture
def settings() -> Settings:
return Settings(issuer="http://localhost:8000", sqlite_path=":memory:")
return Settings(issuer="http://localhost:8000", sqlite_path=":memory:", session_https_only=False)
@pytest.fixture