create httpOnly cookie in Angular and Django

Question

Am building an app using Django as the backend and Angular as the frontend. I understand that saving authentication token in httpOnly cookies is the safest, great. The real question is how do i do that. Been hearing around that i will need something like a middle man server to do that but i have not the slightest idea. Could anyone kindly point me in the right direction? I would be eternally grateful.

I've tried setting it on django that was when i realized it cannot be set across domain. So pls help

• Angular 5
• python 3.6
• django 1.11

Answer 1

In your settings.py file set SESSION_COOKIE_HTTPONLY=True