[pbs-devel] [PATCH proxmox-backup 2/2] ui: opt open id authentication flows into the new http only flow

Shannon Sterz s.sterz at proxmox.com
Thu Aug 7 12:49:12 CEST 2025


otherwise the cookie would not be properly set, leading to users
potentially getting logged out instantly again.

Analyzed-by: Mira Limbeck <m.limbeck at proxmox.com>
Signed-off-by: Shannon Sterz <s.sterz at proxmox.com>
---
 www/LoginView.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/www/LoginView.js b/www/LoginView.js
index cf6c2cf7..08786080 100644
--- a/www/LoginView.js
+++ b/www/LoginView.js
@@ -197,6 +197,7 @@ Ext.define('PBS.LoginView', {
                                 state: auth.state,
                                 code: auth.code,
                                 'redirect-url': redirectURL,
+                                'http-only': true,
                             },
                             method: 'POST',
                             failure: function (response) {
-- 
2.47.2





More information about the pbs-devel mailing list