If a site uses cookie.secure it's causing the AUTH SSL cookie to be set for secure which means it won't be sent on HTTP requests.

Verify and then force secure to FALSE

Comments

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented

It can't hurt to force secure to FALSE, but looking at the code I don't see how this would happen.

coltrane’s picture

coltrane
he/him
commented
Status: Active » Fixed

True, doesn't hurt. Done, committed, and tagged. Thanks for your input greggles

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.