Cfid Secure Flag

dev
1

I use Lucee 6.1 with Windows Server and IIS

How we can set cfid with secure flag to true.
In other words, I want to replace below code in response:
Set-Cookie: cfid=97987978978978;Path=/;Expires=Fri,31-Jul-2054 10:39:26 UTC; HttpOnly;SameSite=Lax
to:
Set-Cookie: cfid=97987978978978;Path=/;Expires=Fri,31-Jul-2054 10:39:26 UTC; HttpOnly=false;Secure:true;SameSite=Lax

2

You should be able to do that in your Application.cfc via the sessioncookie setting:

this.sessioncookie = {
  httpOnly: false,
  secure: true,
  sameSite: "Lax"
}
3 Likes
3

Thanks a lot.
My problem is solved by your post.