Skip to content

Document the auth.cookie.secure and flags.docLinks admin options - #3508

Open
yfwmaniish wants to merge 1 commit into
strapi:mainfrom
yfwmaniish:cms/document-admin-config-options
Open

yfwmaniish wants to merge 1 commit into
strapi:mainfrom
yfwmaniish:cms/document-admin-config-options

Conversation

@yfwmaniish

Copy link
Copy Markdown
Contributor

Description

Adds two admin configuration options that were missing from the admin panel configuration reference (docusaurus/docs/cms/configurations/admin-panel.md):

  • auth.cookie.secure — whether the Secure attribute is set on the admin authentication cookie. When unset it is enabled automatically in production over HTTPS, and setting it to false in production logs a warning (verified in packages/core/admin/shared/utils/session-auth.ts and packages/core/admin/server/src/bootstrap.ts). The auth.cookie table already documents name / domain / path / sameSite, so this fills in the missing sibling.
  • flags.docLinks — enable/disable the documentation links displayed in the admin panel (default true; declared in the Flags config type alongside the already-documented flags.nps and flags.promoteEE).

Both are declared in the admin config type (packages/core/types/src/core/config/admin.ts) but were not listed in the reference.

Related issue(s)/PR(s)

None — found by cross-checking the admin config type against the documentation.

Copilot AI lite review requested due to automatic review settings September 18, 2026 14:45
@vercel

vercel Bot commented Sep 18, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
documentation Ready Ready Preview Sep 18, 2026 2:46pm UTC

Request Review

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

Both are declared in the admin config type but were missing from the
admin panel configuration reference table:
- auth.cookie.secure (Secure flag on the admin auth cookie; auto-enabled
  in production over HTTPS, warns if set to false in production)
- flags.docLinks (toggle admin documentation links; default true)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants