some doku improvements

qvest-digital · Jan 19, 2019 · 7ce7f7c · 7ce7f7c
1 parent bfd3354
commit 7ce7f7c
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,7 +3,7 @@
 
 ## v1.3.0
 
-* __*ATTENTION:*__ Added a config option to set the secure flag for cookies (default: -secure-secure=true). If you run unsecure HTTP you have to set this option ot false!!!
+* __*ATTENTION:*__ Added a config option to set the secure flag for cookies (default: -cookie-secure=true). If you run unsecure HTTP you have to set this option ot false!!!
 * __Google OAuth provider now uses the google userinfo endpoint. No need to activate the google+ APIs anymore.__
 * __Added Gitlab OAuth Provider__
 * The GET endpoint now returns the user info if the call accepts JSON

diff --git a/README.md b/README.md
@@ -16,7 +16,8 @@ Please update loginsrv to v1.3.0 if you are using google login.
 
 __** Attention: Since v1.3.0, pure HTTP is not supported by default **__
 
-See [CHANGELOG](CHANGELOG.md#v130) for details.
+Since v1.3.0, loginsrv sets the secure flag for the login cookie. So, if you use HTTP fo connect with the browser, e.g. for testing, you browser will ignore the cookie.
+Use the flag `-cookie-secure=false` when testing without HTTPS.
 
 ## Abstract