{"action":"closed","issue":{"url":"https://api.github.com/repos/bcosca/fatfree/issues/926","repository_url":"https://api.github.com/repos/bcosca/fatfree","labels_url":"https://api.github.com/repos/bcosca/fatfree/issues/926/labels{/name}","comments_url":"https://api.github.com/repos/bcosca/fatfree/issues/926/comments","events_url":"https://api.github.com/repos/bcosca/fatfree/issues/926/events","html_url":"https://github.com/bcosca/fatfree/issues/926","id":150609838,"number":926,"title":"Cookie not marked as secure, even when on https://","user":{"login":"module0x90","id":16229457,"avatar_url":"https://avatars.githubusercontent.com/u/16229457?v=3","gravatar_id":"","url":"https://api.github.com/users/module0x90","html_url":"https://github.com/module0x90","followers_url":"https://api.github.com/users/module0x90/followers","following_url":"https://api.github.com/users/module0x90/following{/other_user}","gists_url":"https://api.github.com/users/module0x90/gists{/gist_id}","starred_url":"https://api.github.com/users/module0x90/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/module0x90/subscriptions","organizations_url":"https://api.github.com/users/module0x90/orgs","repos_url":"https://api.github.com/users/module0x90/repos","events_url":"https://api.github.com/users/module0x90/events{/privacy}","received_events_url":"https://api.github.com/users/module0x90/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-04-24T00:21:17Z","updated_at":"2016-04-24T00:21:21Z","closed_at":"2016-04-24T00:21:21Z","body":"I noticed that the cookie from F3 is not marked as secure when logging in via https:// (only, no http->https redirect).\r\n\r\nThe documentation/code states:\r\nsecure Set the cookie when a secure HTTPS connection exists. Default: $_SERVER['HTTPS']=='on'\r\n\r\nWhen setting explicitely\r\n$f3->set('JAR.secure', 'TRUE');\r\nthen it is marked as secure.\r\n\r\nThis doesn't though seem to be a problem with F3. Here https://github.com/dmikusa-pivotal/cf-php-apache-buildpack/issues/6 is listed the same problem.\r\nMy setup is nginx/1.9.15, PHP-FPM 5.6.19-0+deb8u1."}}