archetecture security fix

2026-06-11 03:22:12 -04:00
parent 6def9993da
commit 9483750161
3126 changed files with 177194 additions and 37211 deletions
@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSessionCookieName = getSessionCookieName;
+exports.setSessionCookie = setSessionCookie;
+exports.clearSessionCookie = clearSessionCookie;
+const COOKIE_NAMES = {
+    admin: 'admin_session',
+    employee: 'employee_session',
+    renter: 'renter_session',
+};
+function getSessionCookieName(actorType) {
+    return COOKIE_NAMES[actorType];
+}
+function setSessionCookie(res, actorType, token, maxAgeMs) {
+    res.cookie(getSessionCookieName(actorType), token, {
+        httpOnly: true,
+        secure: process.env.NODE_ENV === 'production',
+        sameSite: actorType === 'admin' ? 'strict' : 'lax',
+        path: '/',
+        maxAge: maxAgeMs,
+    });
+}
+function clearSessionCookie(res, actorType) {
+    res.clearCookie(getSessionCookieName(actorType), {
+        httpOnly: true,
+        secure: process.env.NODE_ENV === 'production',
+        sameSite: actorType === 'admin' ? 'strict' : 'lax',
+        path: '/',
+    });
+}
+//# sourceMappingURL=sessionCookies.js.map