Add sameSite=none #293

This commit is contained in:
Max Reynolds
2020-07-01 15:52:19 +01:00
committed by GitHub
parent c574f9d817
commit 450f280b7a

View File

@@ -164,14 +164,16 @@ export const setCookie = (
res.cookie('refresh_token', refresh_token, {
httpOnly: true,
maxAge,
signed: Boolean(COOKIE_SECRET)
signed: Boolean(COOKIE_SECRET),
sameSite: 'none'
})
// set permission variables cookie
res.cookie('permission_variables', permission_variables, {
httpOnly: true,
maxAge,
signed: Boolean(COOKIE_SECRET)
signed: Boolean(COOKIE_SECRET),
sameSite: 'none'
})
}