From 0e9e239e8080b47cce38eab0890ee8ef861d9931 Mon Sep 17 00:00:00 2001
From: HHongSeungWoo <qksn1541@gmail.com>
Date: Tue, 17 May 2022 12:15:58 +0900
Subject: [PATCH] feat: cookie secure

---
 session.go | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/session.go b/session.go
index e2ba5e5..f5ea71b 100644
--- a/session.go
+++ b/session.go
@@ -7,6 +7,7 @@ import (
 	"encoding/base64"
 	"errors"
 	"fmt"
+	"net"
 	"net/http"
 	"net/url"
 	"strings"
@@ -250,6 +251,11 @@ func (m *Manager) isSecure(r *http.Request) bool {
 	if !m.opts.secure {
 		return false
 	}
+	host, _, _ := net.SplitHostPort(r.RemoteAddr)
+	ip := net.ParseIP(host)
+	if ip.IsLoopback() || ip.IsPrivate() {
+		return true
+	}
 	if r.URL.Scheme != "" {
 		return r.URL.Scheme == "https"
 	}