http.secure=true

internal/cognitoauth/auth.go

@@ -285,7 +285,7 @@ func getRefreshTokenFromCookie(c echo.Context, config auth.ConfigProvider) strin
 // Returns:
 //   - bool: True if cookies should be marked as Secure
 func isSecureContext(config auth.ConfigProvider) bool {
-	// For now, return false to match existing comment in original code
-	// In production, this should return true based on environment detection
-	return false
+	// This is a shim left here in case we need to add some computation
+	// before returning a result (for testing mostly)
+	return true
 }