operation.py: Refactor `polswitch' a little.

[chopwood] / httpauth.py

diff --git a/httpauth.py b/httpauth.py
index 22648dd..e29686c 100644 (file)
--- a/httpauth.py
+++ b/httpauth.py
@@ -257,9 +257,10 @@ def cmd_auth(u, pw):
     CGI.redirect(CGI.action('login', why = 'AUTHFAIL'))
   else:
     t = mint_token(u)
-    CGI.redirect(CGI.action('list'),
+    CGI.redirect(CGI.action('list', u),
                  set_cookie = CGI.cookie('chpwd-token', t,
                                          httponly = True,
+                                         secure = CGI.SSLP,
                                          path = CFG.SCRIPT_NAME,
                                          max_age = (CFG.SECRETLIFE -
                                                     CFG.SECRETFRESH)))