Add sameSite attribute for auth cookies

2022-09-24 21:46:25 -04:00
parent 61a8230b47
commit 89a133ea59
2 changed files with 3 additions and 0 deletions
--- a/server/routes/auth/index.ts
+++ b/server/routes/auth/index.ts
@@ -35,6 +35,7 @@ router.get("/redirect", auth(), async (ctx) => {

  ctx.cookies.set("accessToken", jwtToken, {
    httpOnly: false,
+    sameSite: true,
    expires: addMonths(new Date(), 3),
  });
  const [team, collection, view] = await Promise.all([