newInstance($_COOKIE); $session->setCookieParams(['httponly' => true]); $request = $container->get('request'); if ( in_array('https', $request->getHeader('X-Forwarded-Proto')) || $request->getUri()->getScheme() == 'https' ) { $session->setCookieParams(['secure' => true]); } return $session; } }