Can't make private cookie not secure about rocket HOT 4 CLOSED

Perhaps! You should look at the response being sent by the server to confirm.

from rocket.

I can't replicate this. I've tested this directly, and the secure flag is decidedly not set:

user_id=0qyN42VOqf5fe+cizPVrfDmgbRVovNtYFqYCCS8%3D; HttpOnly; SameSite=Strict; Path=/; Expires=Wed, 13 Dec 2023 00:31:32 GMT

Setting secure to false prevents Rocket from overriding the value. What's more, Rocket doesn't touch the value unless TLS is enabled:

(whoops! accidentally hit the close button!)

from rocket.

Very strange, I wonder if this is something that is being overruled on the browser side. I'm using chrome and looking at the cookie there it is set to secure. Could this be cause the cookie was created as secure at some point and the browser hangs on to that?

I'm currently not behind the system of the client but as soon as I can do some more testing (and also test with the 0.5.0 release) hopefully I can give some better feedback.

from rocket.

I'm going to close this out - it does not appear that this is a bug. Please let me know if you're able to confirm otherwise!

from rocket.