Kevin L'Hereec
94f89be605
Security config (3.1): - config/session.ts: cookie.secure now follows app.inProduction instead of being hardcoded to false - config/shield.ts: enable CSP with baseline directives compatible with Vite dev server and Inertia (self + @viteDevUrl/@viteHmrUrl) Frontend typing (3.2): - Replace 'any' props with concrete types (Computer, Component, ComponentType, ComputerState) across computers/*.vue and components/*.vue, using the existing inertia/pages/types/UITypes.ts definitions - Fix UITypes.ts: export ComponentType/ComputerState, switch from interface to type (interfaces are never assignable to Inertia's ComponentProps index signature), drop the stale componentTypeId/componentStateId fields that didn't match the actual Lucid schema (real field is typeId, no component state exists) - Add an asPageProp() boundary cast in the two controllers: Lucid's serialize() returns a loosely typed ModelObject that isn't structurally assignable to the concrete page prop shapes (and the inertia/** tree is excluded from the backend tsconfig, so real types can't be imported directly across that boundary) UTF-8 mojibake fixes (3.3): - Repair broken accented characters (├®/├á/├┤ -> é/à/ô, Ôé¼ -> €) left over from a bad encoding during the GWT->Inertia migration, across ComponentEditor.vue, ComputerComponentsTable.vue, SimpleGallery.vue, TableComponent.vue, isAdminMode.ts and the custom directives Misc cleanup (3.5): - computer.ts: replace console.warn with the app logger (includes computerId) when .cost is accessed without preloading components
79 lines
1.6 KiB
TypeScript
79 lines
1.6 KiB
TypeScript
import env from '#start/env'
|
|
import app from '@adonisjs/core/services/app'
|
|
import { defineConfig, stores } from '@adonisjs/session'
|
|
|
|
const sessionConfig = defineConfig({
|
|
/**
|
|
* Enable or disable session support globally.
|
|
*/
|
|
enabled: true,
|
|
|
|
/**
|
|
* Cookie name storing the session identifier.
|
|
*/
|
|
cookieName: 'adonis-session',
|
|
|
|
/**
|
|
* When set to true, the session id cookie will be deleted
|
|
* once the user closes the browser.
|
|
*/
|
|
clearWithBrowser: false,
|
|
|
|
/**
|
|
* Define how long to keep the session data alive without
|
|
* any activity.
|
|
*/
|
|
age: '2h',
|
|
|
|
/**
|
|
* Configuration for session cookie and the
|
|
* cookie store.
|
|
*/
|
|
cookie: {
|
|
/**
|
|
* Restrict the cookie to a URL path. '/' means all routes.
|
|
*/
|
|
path: '/',
|
|
|
|
/**
|
|
* Prevent JavaScript access to the cookie in the browser.
|
|
*/
|
|
httpOnly: true,
|
|
|
|
/**
|
|
* Send cookies only over HTTPS in production.
|
|
*/
|
|
secure: app.inProduction,
|
|
|
|
/**
|
|
* Cross-site policy for cookie sending.
|
|
*/
|
|
sameSite: 'lax',
|
|
},
|
|
|
|
/**
|
|
* The store to use. Make sure to validate the environment
|
|
* variable in order to infer the store name without any
|
|
* errors.
|
|
*/
|
|
store: env.get('SESSION_DRIVER'),
|
|
|
|
/**
|
|
* List of configured stores. Refer documentation to see
|
|
* list of available stores and their config.
|
|
*/
|
|
stores: {
|
|
/**
|
|
* Store session data inside encrypted cookies.
|
|
*/
|
|
cookie: stores.cookie(),
|
|
|
|
/**
|
|
* Store session data inside the configured database.
|
|
*/
|
|
database: stores.database(),
|
|
},
|
|
})
|
|
|
|
export default sessionConfig
|