Enha: cookies for local dev

config/config.go

@@ -28,8 +28,10 @@ func LoadConfigOrDefault(fn string) *Config {
 	if err != nil {
 		slog.Warn("failed to read config from file, loading default", "error", err)
 		config.BaseURL = "https://localhost:3000"
-		config.SessionLifetime = 300
+		config.SessionLifetime = 30000
 		config.CookieSecret = "test"
+		config.ServerConfig.Host = "localhost"
+		config.ServerConfig.Port = "3000"
 	}
 	return config
 }

handlers/auth.go

@@ -105,9 +105,9 @@ func makeCookie(username string, remote string) (*http.Cookie, error) {
 	cookieValue := base64.URLEncoding.EncodeToString([]byte(
 		string(signature) + sessionToken))
 	cookie := &http.Cookie{
-		Name:     cookieName,
-		Value:    cookieValue,
-		Secure:   true,
+		Name:  cookieName,
+		Value: cookieValue,
+		// Secure:   true,
 		HttpOnly: true,
 		SameSite: http.SameSiteNoneMode,
 		Domain:   cfg.ServerConfig.Host,
@@ -115,7 +115,9 @@ func makeCookie(username string, remote string) (*http.Cookie, error) {
 	log.Info("check remote addr for cookie set",
 		"remote", remote, "session", session)
 	if strings.Contains(remote, "192.168.0") {
-		cookie.Domain = "home.host"
+		// cookie.Domain = "192.168.0.101"
+		cookie.Domain = ""
+		cookie.SameSite = http.SameSiteLaxMode
 		log.Info("changing cookie domain", "domain", cookie.Domain)
 	}
 	// set ctx?