skip to content

detached c487b81

fix(security): Re-use the clearance cookie provided by cloudflare

commit: c487b814fc74e3260288cd98a2d88005869fd683
author: Kit · 20mo ago · 2025-02-18 07:26 UTC
parent: f62d84a
signature: SSH UnverifiedSHA256:H91DFuEG4jpk5edzLA4aUKkpv4zv9Q339ipRmkph6Tk The key is unknown

1 file · +1 -11

M src/routes/api/register/+server.ts +1 -11


@@ -157,15 +157,5 @@ export const POST: RequestHandler = async ({ request }) => {
157	157		return new Response(JSON.stringify({ error: 'User registration failed. Possibly user already exists.' } as RegisterResponseError), { status: 409 });
158	158		}
159	159
160		-	// Set a clearance cookie (valid for 1 hour) to hold the turnstile success.
161		-	const headers = new Headers();
162		-	headers.set(
163		-	'set-cookie',
164		-	`cf-clearance=1; Path=/; Max-Age=3600; HttpOnly; Secure; SameSite=Strict`
165		-	);
166		-
167		-	return new Response(
168		-	JSON.stringify({ success: true } as RegisterResponseSuccess),
169		-	{ status: 201, headers }
170		-	);
	160	+	return new Response(JSON.stringify({ success: true } as RegisterResponseSuccess), { status: 201 });
171	161		};


@@ -157,15 +157,5 @@ export const POST: RequestHandler = async ({ request }) => {
157		return new Response(JSON.stringify({ error: 'User registration failed. Possibly user already exists.' } as RegisterResponseError), { status: 409 });	157		return new Response(JSON.stringify({ error: 'User registration failed. Possibly user already exists.' } as RegisterResponseError), { status: 409 });
158		}	158		}
159			159
160	-	// Set a clearance cookie (valid for 1 hour) to hold the turnstile success.	160	+	return new Response(JSON.stringify({ success: true } as RegisterResponseSuccess), { status: 201 });
161	-	const headers = new Headers();
162	-	headers.set(
163	-	'set-cookie',
164	-	`cf-clearance=1; Path=/; Max-Age=3600; HttpOnly; Secure; SameSite=Strict`
165	-	);
166	-
167	-	return new Response(
168	-	JSON.stringify({ success: true } as RegisterResponseSuccess),
169	-	{ status: 201, headers }
170	-	);
171		};	161		};