use authUrl for condition

Signed-off-by: Fidel Coria <fidel.coria@aa.com>
2021-12-22 10:47:36 -06:00
parent eb48e78886
commit 5801adbd18
1 changed files with 9 additions and 2 deletions
@@ -68,8 +68,15 @@ export async function createRouter(
  if (secret) {
    router.use(cookieParser(secret));
    // TODO: Configure the server-side session storage.  The default MemoryStore is not designed for production
-    const enforceCookieSSL = process.env.NODE_ENV === 'production';
-    router.use(session({ secret, saveUninitialized: false, resave: false, cookie: { secure: enforceCookieSSL } }));
+    const enforceCookieSSL = authUrl.startsWith('https');
+    router.use(
+      session({
+        secret,
+        saveUninitialized: false,
+        resave: false,
+        cookie: { secure: enforceCookieSSL },
+      }),
+    );
    router.use(passport.initialize());
    router.use(passport.session());
  } else {