Merge pull request #15239 from grafana/auth_token_middleware_refactor

Auth token package and middleware refactoring
2019-02-07 14:24:23 +01:00
parent 78ea7ae783 487e7b5ea6
commit c71904e326
30 changed files with 6358 additions and 530 deletions
@@ -287,6 +287,14 @@ Default is `false`.

 Define a white list of allowed ips/domains to use in data sources. Format: `ip_or_domain:port` separated by spaces

+### cookie_secure
+
+Set to `true` if you host Grafana behind HTTPS. Default is `false`.
+
+### cookie_samesite
+
+Sets the `SameSite` cookie attribute and prevents the browser from sending this cookie along with cross-site requests. The main goal is mitigate the risk of cross-origin information leakage. It also provides some protection against cross-site request forgery attacks (CSRF),  [read more here](https://www.owasp.org/index.php/SameSite). Valid values are `lax`, `strict` and `none`. Default is `lax`.
+
 <hr />

 ## [users]