set cookie secret unconditionally

no reason to leave it undefined, even if we don't use it
jupyterhub · May 6, 2024 · 6fa1f1b · 6fa1f1b
1 parent 7a9d4ba
commit 6fa1f1b
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/binderhub/app.py b/binderhub/app.py
@@ -962,8 +962,7 @@ def initialize(self, *args, **kwargs):
                 "enable_api_only_mode": self.enable_api_only_mode,
             }
         )
-        if self.auth_enabled:
-            self.tornado_settings["cookie_secret"] = os.urandom(32)
+        self.tornado_settings["cookie_secret"] = os.urandom(32)
         if self.cors_allow_origin:
             self.tornado_settings.setdefault("headers", {})[
                 "Access-Control-Allow-Origin"