1
0
Fork 0
mirror of https://github.com/maybe-finance/maybe.git synced 2025-07-24 23:59:40 +02:00

Another attempt at fixing MFA issues

This commit is contained in:
Josh Pigford 2025-03-05 13:10:53 -06:00
parent 071ad52c7f
commit e49bda4a2e
2 changed files with 21 additions and 2 deletions

View file

@ -28,12 +28,22 @@ module Authentication
end
def find_session_by_cookie
Session.find_by(id: cookies.signed[:session_token])
cookie_value = cookies.signed[:session_token]
Rails.logger.info "Looking for session with cookie value: #{cookie_value.present? ? 'present' : 'missing'}"
session = Session.find_by(id: cookie_value)
Rails.logger.info "Session found: #{session.present? ? 'yes' : 'no'}"
session
end
def create_session_for(user)
session = user.sessions.create!
cookies.signed.permanent[:session_token] = { value: session.id, httponly: true }
Rails.logger.info "Setting session cookie with value: #{session.id}"
# Explicitly set SameSite attribute and ensure cookie is set properly
cookies.signed.permanent[:session_token] = {
value: session.id,
httponly: true,
same_site: :lax
}
session
end