Souvik Kumar f5c21db1ef fix: mark session cookie as Secure when served over HTTPS ...

Self-hosted better-auth is configured with secure cookies off so plain
HTTP access (http://<ip>:3000) keeps working, but that also meant the
session cookie never got the Secure attribute even behind HTTPS. A cookie
without Secure can be replayed over plain HTTP.

Add Secure to the auth response cookies per request when X-Forwarded-Proto
is https (what Traefik sends on TLS), leaving plain-HTTP requests untouched.

Fixes #4709

2026-08-09 21:05:37 +05:30

..

api

Feat/tailwind v4 shadcn update (#4706)

2026-06-30 15:45:23 -06:00

dokploy

fix: mark session cookie as Secure when served over HTTPS

2026-08-09 21:05:37 +05:30

monitoring

fix: enhance container metrics query to support wildcard matching for container names

2026-03-08 16:16:45 -06:00

schedules

Merge pull request #4931 from Dokploy/fix/postgres-100-arg-limit-finders

2026-08-05 23:48:00 -06:00