Default BREWLOG_RP_ID to "localhost" and BREWLOG_RP_ORIGIN to "http://localhost:3000". When these localhost defaults are active, insecure cookies are enabled automatically so local dev works without setting BREWLOG_INSECURE_COOKIES. A warning is logged at startup when insecure cookies are active. The insecure_cookies flag is now threaded through AppState instead of reading the env var at cookie-set time. |
||
|---|---|---|
| .. | ||
| cli | ||
| server | ||