comment and .env

.env.template

@@ -4,3 +4,4 @@ AUTHORIZATION_URL="https://auth.viarezo.fr/oauth/authorize"
 TOKEN_URL="https://auth.viarezo.fr/oauth/token"
 USERINFO_URL="https://auth.viarezo.fr/oidc/userinfo"
 LOGOUT_URL="https://auth.viarezo.fr/logout"
+SESSION_SECRET="my-super-secret"
\ No newline at end of file

main.py

@@ -20,7 +20,7 @@ app.secret_key = SESSION_SECRET
 app.config['SESSION_COOKIE_HTTPONLY'] = True  # Prevents JavaScript access to the cookie
 app.config['SESSION_COOKIE_SECURE'] = True   # Ensures the cookie is only sent over HTTPS
 app.config['SESSION_COOKIE_SAMESITE'] = 'Lax'  # Mitigates CSRF attacks
-app.config['SESSION_TYPE'] = 'redis'  # Use Redis to store sessions
+app.config['SESSION_TYPE'] = 'redis'  # Use Redis to store sessions (server-side)
 app.config['SESSION_PERMANENT'] = False  # Session is deleted when the browser is closed
 app.config['SESSION_USE_SIGNER'] = True  # Sign the session cookie
 app.config['SESSION_KEY_PREFIX'] = 'oauth_'  # Prefix for session keys