diff --git a/src/Lidarr.Http/Authentication/EnableAuthInNancy.cs b/src/Lidarr.Http/Authentication/EnableAuthInNancy.cs index 632526406..44154977c 100644 --- a/src/Lidarr.Http/Authentication/EnableAuthInNancy.cs +++ b/src/Lidarr.Http/Authentication/EnableAuthInNancy.cs @@ -6,7 +6,6 @@ using Nancy; using Nancy.Authentication.Basic; using Nancy.Authentication.Forms; using Nancy.Bootstrapper; -using Nancy.Cookies; using Nancy.Cryptography; using NzbDrone.Common.EnvironmentInfo; using NzbDrone.Common.Extensions; @@ -118,7 +117,7 @@ namespace Lidarr.Http.Authentication if (FormsAuthentication.DecryptAndValidateAuthenticationCookie(formsAuthCookieValue, _formsAuthConfig).IsNotNullOrWhiteSpace()) { - var formsAuthCookie = new NancyCookie(formsAuthCookieName, formsAuthCookieValue, true, false, DateTime.UtcNow.AddDays(7)) + var formsAuthCookie = new SonarrNancyCookie(formsAuthCookieName, formsAuthCookieValue, true, false, DateTime.UtcNow.AddDays(7)) { Path = GetCookiePath() }; diff --git a/src/Sonarr.Http/Authentication/SonarrNancyCookie.cs b/src/Sonarr.Http/Authentication/SonarrNancyCookie.cs new file mode 100644 index 000000000..a74379449 --- /dev/null +++ b/src/Sonarr.Http/Authentication/SonarrNancyCookie.cs @@ -0,0 +1,33 @@ +using System; +using Nancy.Cookies; + +namespace Sonarr.Http.Authentication +{ + public class SonarrNancyCookie : NancyCookie + { + public SonarrNancyCookie(string name, string value) : base(name, value) + { + } + + public SonarrNancyCookie(string name, string value, DateTime expires) : base(name, value, expires) + { + } + + public SonarrNancyCookie(string name, string value, bool httpOnly) : base(name, value, httpOnly) + { + } + + public SonarrNancyCookie(string name, string value, bool httpOnly, bool secure) : base(name, value, httpOnly, secure) + { + } + + public SonarrNancyCookie(string name, string value, bool httpOnly, bool secure, DateTime? expires) : base(name, value, httpOnly, secure, expires) + { + } + + public override string ToString() + { + return base.ToString() + "; SameSite=Strict"; + } + } +}