Function isSecureRequest

server-source-code/internal/handler/auth.go:756–758

isSecureRequest returns true if the request is over HTTPS (TLS or X-Forwarded-Proto).

(r *http.Request)

// isSecureRequest returns true if the request is over HTTPS (TLS or X-Forwarded-Proto).
func isSecureRequest(r *http.Request) bool {
	return r.TLS != nil || r.Header.Get("X-Forwarded-Proto") == "https"
}

// clearAuthCookies removes auth cookies (matches Node backend).
// Secure must match the original cookie for the browser to clear it.