angular security course

Author: Your Name

package.json

@@ -7,7 +7,7 @@
   },
   "scripts": {
     "ng": "ng",
-    "start": "ng serve --proxy-config ./proxy.json",
+    "start": "ng serve --proxy-config ./proxy.json --ssl 1 --ssl-key key.pem --ssl-cert cert.pem",
     "start-server": "./node_modules/.bin/ts-node ./server/server.ts --secure",
     "server": "./node_modules/.bin/nodemon  -w ./server --ext \".ts\" --exec \"npm run start-server\"",
     "hash": "node ./demos/hash.js",

server/create-user.route.ts

@@ -38,7 +38,7 @@ async function createUserAndSession(res:Response, credentials) {
 
     sessionStore.createSession(sessionId, user);
 
-    res.cookie("SESSIONID", sessionId);
+    res.cookie("SESSIONID", sessionId, {httpOnly:true, secure:true});
 
     res.status(200).json({id:user.id, email:user.email});
 }