damanukyan/auth
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add domain in cookie and cors

Browse Source
This commit is contained in:
Daniil Manukian
2026-05-12 19:25:16 +03:00
parent 8347ff40f4
commit 2d9f44979c
4 changed files with 25 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
src/presentation/routing/auth.py
View File

@@ -83,6 +83,7 @@ async def registration(
secure=settings.AUTH_COOKIE_SECURE,
samesite='lax',
path='/',
domain=settings.AUTH_COOKIE_DOMAIN,
max_age=60 * 60 * 24 * 365 * 5
)
@@ -93,6 +94,7 @@ async def registration(
secure=settings.AUTH_COOKIE_SECURE,
samesite='lax',
path='/',
domain=settings.AUTH_COOKIE_DOMAIN,
max_age=int(settings.JWT_ACCESS_TTL_SECONDS),
)
response.set_cookie(
@@ -102,6 +104,7 @@ async def registration(
secure=settings.AUTH_COOKIE_SECURE,
samesite='lax',
path='/',
domain=settings.AUTH_COOKIE_DOMAIN,
max_age=int(settings.JWT_REFRESH_TTL_SECONDS),
)
return response
@@ -174,6 +177,7 @@ async def login(
secure=settings.AUTH_COOKIE_SECURE,
samesite='lax',
path='/',
domain=settings.AUTH_COOKIE_DOMAIN,
max_age=60 * 60 * 24 * 365 * 5
)
@@ -184,6 +188,7 @@ async def login(
secure=settings.AUTH_COOKIE_SECURE,
samesite='lax',
path='/',
domain=settings.AUTH_COOKIE_DOMAIN,
max_age=int(settings.JWT_ACCESS_TTL_SECONDS),
)
@@ -194,6 +199,7 @@ async def login(
secure=settings.AUTH_COOKIE_SECURE,
samesite='lax',
path='/',
domain=settings.AUTH_COOKIE_DOMAIN,
max_age=int(settings.JWT_REFRESH_TTL_SECONDS),
)
@@ -211,8 +217,8 @@ async def logout_current(
await command(refresh_token=refresh_token)
response = ORJSONResponse({'ok': True})
response.delete_cookie('access_token', path='/')
response.delete_cookie('refresh_token', path='/')
response.delete_cookie('access_token', path='/', domain=settings.AUTH_COOKIE_DOMAIN)
response.delete_cookie('refresh_token', path='/', domain=settings.AUTH_COOKIE_DOMAIN)
return response

10
src/presentation/routing/jwt.py
View File

@@ -22,8 +22,8 @@ async def refresh_tokens(
if not refresh_token:
response = ORJSONResponse({'ok': False, 'error': 'No refresh token'}, status_code=401)
response.delete_cookie('access_token', path='/')
response.delete_cookie('refresh_token', path='/')
response.delete_cookie('access_token', path='/', domain=settings.AUTH_COOKIE_DOMAIN)
response.delete_cookie('refresh_token', path='/', domain=settings.AUTH_COOKIE_DOMAIN)
return response
ip = request.client.host if request.client else None
@@ -33,8 +33,8 @@ async def refresh_tokens(
access, refresh = await command(refresh_token=refresh_token, ip=ip, user_agent=user_agent)
except ApplicationException:
response = ORJSONResponse({'result': False}, status_code=401)
response.delete_cookie('access_token', path='/')
response.delete_cookie('refresh_token', path='/')
response.delete_cookie('access_token', path='/', domain=settings.AUTH_COOKIE_DOMAIN)
response.delete_cookie('refresh_token', path='/', domain=settings.AUTH_COOKIE_DOMAIN)
return response
response = ORJSONResponse({'result': True})
@@ -46,6 +46,7 @@ async def refresh_tokens(
secure=settings.AUTH_COOKIE_SECURE,
samesite='lax',
path='/',
domain=settings.AUTH_COOKIE_DOMAIN,
max_age=int(settings.JWT_ACCESS_TTL_SECONDS),
)
response.set_cookie(
@@ -55,6 +56,7 @@ async def refresh_tokens(
secure=settings.AUTH_COOKIE_SECURE,
samesite='lax',
path='/',
domain=settings.AUTH_COOKIE_DOMAIN,
max_age=int(settings.JWT_REFRESH_TTL_SECONDS),
)
return response