deploy at 2024-08-24 19:52:56.044132

main.py

@@ -440,9 +440,19 @@ def post(login: Login, sess):
     if not compare_digest(ADMIN_PWD.encode("utf-8"), login.pwd.encode("utf-8")):
         # Incorrect password - add error message
         return RedirectResponse("/login?error=True", status_code=303)
-    print(f"Session after setting auth: {sess}")
+    
+    sess["auth"] = True
     response = RedirectResponse("/admin", status_code=303)
-    print(f"Cookies being set: {response.headers.get('Set-Cookie')}")
+    
+    # Explicitly set the session cookie
+    response.set_cookie(
+        key="session",
+        value=sess,
+        httponly=True,
+        secure=True,
+        samesite="Lax"
+    )
+    
     return response
 
 
@@ -647,7 +657,11 @@ def download_csv(auth):
 
 
 @app.get("/admin")
-def get_admin(auth, page: int = 1):
+def get_admin(auth, sess, page: int = 1):
+    # Check if the user is authenticated
+    if not sess.get("auth"):
+        return RedirectResponse("/login", status_code=303)
+    
     limit = 15
     offset = (page - 1) * limit
     total_queries_result = list(