github/plexpy
1
0
Fork 0
mirror of https://github.com/Tautulli/Tautulli.git synced 2025-07-07 13:41:15 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix use UTC for JWT expiry and max-age for cookie

Browse source
This commit is contained in:
JonnyWong16 2023-12-06 23:09:32 -08:00
parent e3113ebd30
commit fe7a59c7f9
No known key found for this signature in database
GPG key ID: B1F1F9807184697A
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
plexpy/webauth.py
View file

@ -22,7 +22,7 @@
from future.builtins import object from future.builtins import object
from datetime import datetime, timedelta from datetime import datetime, timedelta, timezone
from future.moves.urllib.parse import quote, unquote from future.moves.urllib.parse import quote, unquote
import cherrypy import cherrypy
@ -378,7 +378,7 @@ class AuthController(object):
if valid_login: if valid_login:
time_delta = timedelta(days=30) if remember_me == '1' else timedelta(minutes=60) time_delta = timedelta(days=30) if remember_me == '1' else timedelta(minutes=60)
expiry = datetime.now() + time_delta expiry = datetime.now(tz=timezone.utc) + time_delta
payload = { payload = {
'user_id': user_details['user_id'], 'user_id': user_details['user_id'],
@ -399,7 +399,7 @@ class AuthController(object):
jwt_cookie = str(JWT_COOKIE_NAME + plexpy.CONFIG.PMS_UUID) jwt_cookie = str(JWT_COOKIE_NAME + plexpy.CONFIG.PMS_UUID)
cherrypy.response.cookie[jwt_cookie] = jwt_token cherrypy.response.cookie[jwt_cookie] = jwt_token
cherrypy.response.cookie[jwt_cookie]['expires'] = int(time_delta.total_seconds()) cherrypy.response.cookie[jwt_cookie]['max-age'] = int(time_delta.total_seconds())
cherrypy.response.cookie[jwt_cookie]['path'] = plexpy.HTTP_ROOT.rstrip('/') or '/' cherrypy.response.cookie[jwt_cookie]['path'] = plexpy.HTTP_ROOT.rstrip('/') or '/'
cherrypy.response.cookie[jwt_cookie]['httponly'] = True cherrypy.response.cookie[jwt_cookie]['httponly'] = True
cherrypy.response.cookie[jwt_cookie]['samesite'] = 'lax' cherrypy.response.cookie[jwt_cookie]['samesite'] = 'lax'