diff --git a/account/jwt.go b/account/jwt.go index f1d78ca..0ac7c1b 100644 --- a/account/jwt.go +++ b/account/jwt.go @@ -137,6 +137,7 @@ func ClearAuthCookie(jc jape.Context, apiName string) { Name: routeableApi.AuthTokenName(), Value: "", Expires: time.Now().Add(-1 * time.Hour), + Secure: true, HttpOnly: true, Path: "/", Domain: routeableApi.Domain(),