feat: 쿠키 보안 옵션 설정 #357

woowacourse-teams · Oct 22, 2024 · 0aaf9bb · 0aaf9bb
1 parent e9819c8
commit 0aaf9bb
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/backend/src/main/java/ddangkong/controller/room/RejoinCookieEncryptor.java b/backend/src/main/java/ddangkong/controller/room/RejoinCookieEncryptor.java
@@ -18,7 +18,10 @@ public RejoinCookieEncryptor(EncryptionUtils encryptionUtils, @Value("${cookie.r
 
     public Cookie getEncodedCookie(Object value) {
         String encrypt = encryptionUtils.encrypt(String.valueOf(value));
-        return new Cookie(rejoinKey, encrypt);
+        Cookie cookie = new Cookie(rejoinKey, encrypt);
+        cookie.setHttpOnly(true);
+        cookie.setSecure(true);
+        return cookie;
     }
 
     public Long getDecodedCookieValue(String cookieValue) {