let development be insecure cookies

modified:   development.ini
	modified:   remarkbox/views/authentication.py
This commit is contained in:
Russell Ballestrini 2025-02-06 17:41:24 -05:00
parent 64593125b7
commit 77ebb373e5
2 changed files with 3 additions and 3 deletions

View file

@ -37,7 +37,7 @@ session.timeout = 31104000
session.max_age = 31104000
session.reissue_time = 15552000
session.samesite = none
session.secure = True
session.secure = False
###
# custom app configuration.

View file

@ -104,8 +104,8 @@ def verification_challenge(request):
# get or create a User object from the posted email.
user = get_or_create_user_by_email(request.dbsession, email)
if "submit" in request.params:
if raw_otp and user.check_password(raw_otp):
if raw_otp:
if user.check_password(raw_otp):
# success: the user was verified.
user.verified = True
msg = ("Welcome {}".format(user.name), "success")