From 4dbfe782f5c173cac5bb4c25fed8359b5d6b728c Mon Sep 17 00:00:00 2001 From: Alexey Novikov Date: Thu, 17 Sep 2026 01:03:22 +0300 Subject: [PATCH] Allow admin session cookies on HTTP so Payload login works without HTTPS. Co-authored-by: Cursor --- CHANGELOG.md | 7 +++++++ README.md | 2 +- apps/cms/package.json | 2 +- apps/cms/src/collections/Users.ts | 3 ++- apps/web/package.json | 2 +- package.json | 2 +- 6 files changed, 13 insertions(+), 5 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index d1a0111..243c65d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,12 @@ Формат основан на [Keep a Changelog](https://keepachangelog.com/ru/1.1.0/), версии — [SemVer](https://semver.org/lang/ru/). +## [1.0.7] — 2026-09-17 + +### CMS + +- Вход в админку по HTTP снова сохраняет сессию: Secure-cookie больше не ставится без HTTPS + ## [1.0.6] — 2026-09-17 ### Сайт @@ -64,6 +70,7 @@ - Docker Compose для локальной БД - Секреты и логины в git не входят +[1.0.7]: https://git.myunion.pro/Alex/Moniki_uslugi/src/tag/v1.0.7 [1.0.6]: https://git.myunion.pro/Alex/Moniki_uslugi/src/tag/v1.0.6 [1.0.5]: https://git.myunion.pro/Alex/Moniki_uslugi/src/tag/v1.0.5 [1.0.4]: https://git.myunion.pro/Alex/Moniki_uslugi/src/tag/v1.0.4 diff --git a/README.md b/README.md index 45c3f1b..f0e7d21 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ Репозиторий: [Moniki_uslugi](https://git.myunion.pro/Alex/Moniki_uslugi) на [git.myunion.pro](https://git.myunion.pro/). -Текущая версия: **v1.0.6** (см. [CHANGELOG.md](CHANGELOG.md)). +Текущая версия: **v1.0.7** (см. [CHANGELOG.md](CHANGELOG.md)). ## Что внутри diff --git a/apps/cms/package.json b/apps/cms/package.json index 5033e3f..0edb20e 100644 --- a/apps/cms/package.json +++ b/apps/cms/package.json @@ -1,6 +1,6 @@ { "name": "@moniki/cms", - "version": "1.0.6", + "version": "1.0.7", "private": true, "type": "module", "scripts": { diff --git a/apps/cms/src/collections/Users.ts b/apps/cms/src/collections/Users.ts index 12b97d5..33f03f9 100644 --- a/apps/cms/src/collections/Users.ts +++ b/apps/cms/src/collections/Users.ts @@ -8,7 +8,8 @@ export const Users: CollectionConfig = { tokenExpiration: 60 * 60 * 24 * 7, cookies: { sameSite: 'Lax', - secure: process.env.NODE_ENV === 'production', + // HTTP admin (IP:3001) cannot store Secure cookies; enable only on HTTPS. + secure: (process.env.NEXT_PUBLIC_SERVER_URL || '').startsWith('https://'), }, }, admin: { diff --git a/apps/web/package.json b/apps/web/package.json index 460af74..89f9198 100644 --- a/apps/web/package.json +++ b/apps/web/package.json @@ -1,6 +1,6 @@ { "name": "@moniki/web", - "version": "1.0.6", + "version": "1.0.7", "private": true, "scripts": { "dev": "next dev -p 3000", diff --git a/package.json b/package.json index c3ef8b4..6696e9e 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "moniki-platnye-uslugi", - "version": "1.0.6", + "version": "1.0.7", "private": true, "scripts": { "dev": "pnpm -r --parallel dev",