secure cookies

1 files changed, 3 insertions, 3 deletions

diff --git a/backend/main.py b/backend/main.py
index c69247f..e7cbd84 100644
--- a/backend/main.py
+++ b/backend/main.py
@@ -226,18 +226,18 @@ def final_timer_finished(timer_id):
 
 def create_session(response: fastapi.Response):
     cookie = secrets.token_hex(32)
-    response.set_cookie(key="session_key", value=cookie)
+    response.set_cookie(key="session_key", value=cookie, secure=True)
     return cookie
 
 
 def authenticate_block(response: fastapi.Response, machine_id: str = None, block: int = None):
     if machine_id:
         blk = URI_TO_MACHINES[qr_uri[machine_id]][0]
-        response.set_cookie(key="auth_block", value=blk)
+        response.set_cookie(key="auth_block", value=blk, secure=True)
         return blk
     elif block:
         blk = block
-        response.set_cookie(key="auth_block", value=blk)
+        response.set_cookie(key="auth_block", value=blk, secure=True)
         return block
     else:
         return "FAIL"