diff --git a/src/Lidarr.Http/Authentication/EnableAuthInNancy.cs b/src/Lidarr.Http/Authentication/EnableAuthInNancy.cs index 632526406..9e37c7018 100644 --- a/src/Lidarr.Http/Authentication/EnableAuthInNancy.cs +++ b/src/Lidarr.Http/Authentication/EnableAuthInNancy.cs @@ -6,7 +6,6 @@ using Nancy; using Nancy.Authentication.Basic; using Nancy.Authentication.Forms; using Nancy.Bootstrapper; -using Nancy.Cookies; using Nancy.Cryptography; using NzbDrone.Common.EnvironmentInfo; using NzbDrone.Common.Extensions; @@ -118,7 +117,7 @@ namespace Lidarr.Http.Authentication if (FormsAuthentication.DecryptAndValidateAuthenticationCookie(formsAuthCookieValue, _formsAuthConfig).IsNotNullOrWhiteSpace()) { - var formsAuthCookie = new NancyCookie(formsAuthCookieName, formsAuthCookieValue, true, false, DateTime.UtcNow.AddDays(7)) + var formsAuthCookie = new LidarrNancyCookie(formsAuthCookieName, formsAuthCookieValue, true, false, DateTime.UtcNow.AddDays(7)) { Path = GetCookiePath() }; diff --git a/src/Lidarr.Http/Authentication/LidarrNancyCookie.cs b/src/Lidarr.Http/Authentication/LidarrNancyCookie.cs new file mode 100644 index 000000000..9ec8cbf6b --- /dev/null +++ b/src/Lidarr.Http/Authentication/LidarrNancyCookie.cs @@ -0,0 +1,38 @@ +using System; +using Nancy.Cookies; + +namespace Lidarr.Http.Authentication +{ + public class LidarrNancyCookie : NancyCookie + { + public LidarrNancyCookie(string name, string value) + : base(name, value) + { + } + + public LidarrNancyCookie(string name, string value, DateTime expires) + : base(name, value, expires) + { + } + + public LidarrNancyCookie(string name, string value, bool httpOnly) + : base(name, value, httpOnly) + { + } + + public LidarrNancyCookie(string name, string value, bool httpOnly, bool secure) + : base(name, value, httpOnly, secure) + { + } + + public LidarrNancyCookie(string name, string value, bool httpOnly, bool secure, DateTime? expires) + : base(name, value, httpOnly, secure, expires) + { + } + + public override string ToString() + { + return base.ToString() + "; SameSite=Strict"; + } + } +}