aboutsummaryrefslogtreecommitdiff
path: root/src/server/Controller/SignIn.hs
diff options
context:
space:
mode:
authorJoris2016-03-31 18:45:36 +0200
committerJoris2016-03-31 18:46:23 +0200
commit01e4ce0fa7c369996ec4ef3a033d16d6fa0eb715 (patch)
tree5a81013be23c3f368fc7e6e1a0a41008a269d0fc /src/server/Controller/SignIn.hs
parent84f53fac431df20afd54817cca14260f1202e9ff (diff)
downloadbudget-01e4ce0fa7c369996ec4ef3a033d16d6fa0eb715.tar.gz
budget-01e4ce0fa7c369996ec4ef3a033d16d6fa0eb715.tar.bz2
budget-01e4ce0fa7c369996ec4ef3a033d16d6fa0eb715.zip
Use https link and secure cookie when activated
Diffstat (limited to 'src/server/Controller/SignIn.hs')
-rw-r--r--src/server/Controller/SignIn.hs10
1 files changed, 8 insertions, 2 deletions
diff --git a/src/server/Controller/SignIn.hs b/src/server/Controller/SignIn.hs
index f6804e1..0fbe7c5 100644
--- a/src/server/Controller/SignIn.hs
+++ b/src/server/Controller/SignIn.hs
@@ -17,7 +17,8 @@ import qualified Data.Text as T
import qualified Data.Text.Lazy as TL
import qualified Data.Text.Encoding as TE
-import Conf
+import Conf (Conf)
+import qualified Conf
import SendMail
@@ -38,7 +39,12 @@ signIn conf login =
case maybeUser of
Just user -> do
token <- liftIO . runDb $ createSignInToken login
- let url = T.concat ["http://", hostname conf, "?signInToken=", token]
+ let url = T.concat [
+ if Conf.https conf then "https://" else "http://",
+ Conf.hostname conf,
+ "?signInToken=",
+ token
+ ]
maybeSentMail <- liftIO . sendMail $ SignIn.getMail conf (entityVal user) url [login]
case maybeSentMail of
Right _ ->