Set frontend auth cookie to be sent over secure channel only

2017-06-23 08:22:44 +02:00
parent f2d9cc0c0b
commit 805709a91b
1 changed files with 1 additions and 1 deletions
@@ -308,7 +308,7 @@
      </buildProviders>
    </compilation>
    <authentication mode="Forms">
-      <forms name="yourAuthCookie" loginUrl="login.aspx" protection="All" path="/" slidingExpiration="true" timeout="525600" />
+      <forms requireSSL="true" name="yourAuthCookie" loginUrl="login.aspx" protection="All" path="/" slidingExpiration="true" timeout="525600" />
    </authentication>
    <authorization>
      <allow users="?" />