HTTPS/CORS improvements: Enable CORS for player connections, secure session cookies, add certificate endpoint, nginx CORS headers

2026-01-16 22:29:49 +02:00
parent cf44843418
commit c4e43ce69b
15 changed files with 3497 additions and 0 deletions
--- a/app/config.py
+++ b/app/config.py
@@ -91,6 +91,7 @@ class ProductionConfig(Config):
    
    # Security
    SESSION_COOKIE_SECURE = True
+    SESSION_COOKIE_SAMESITE = 'Lax'
    WTF_CSRF_ENABLED = True