Method createSessionCookie

lib/models/multi-factor-auth.ts:94–119

(
    request: Request,
    user: User,
    response: Response,
  )

  }

  private static async createSessionCookie(
    request: Request,
    user: User,
    response: Response,
  ) {
    const token = await generateToken({ user_id: user.id, session_id: MFA_SESSION_ID });

    const cookie: Cookie = {
      name: COOKIE_NAME,
      value: token,
      expires: new Date(Date.now() + 1000 * 60 * 30), // 30 minutes
      path: '/',
      secure: isRunningLocally(request) ? false : true,
      httpOnly: true,
      sameSite: 'Lax',
      domain: await resolveCookieDomain(request),
    };

    if (await AppConfig.isCookieDomainSecurityDisabled()) {
      delete cookie.domain;
    }

    setCookie(response.headers, cookie);

    return response;
  }

  static async getDataFromRequest(request: Request): Promise<{ user: User } | null> {
    const cookies = getCookies(request.headers);