fix: change SameSite cookie attribute from 'strict' to 'lax' for better compatibility

2025-08-25 12:33:29 +02:00 · 2025-08-25 12:33:29 +02:00 · 39f6cdfdbd
commit 39f6cdfdbd
parent 8d6eeb49c5
2 changed files with 2 additions and 2 deletions
--- a/apps/infoalloggi/src/middlewares/auth_middleware.ts
+++ b/apps/infoalloggi/src/middlewares/auth_middleware.ts
@ -140,7 +140,7 @@ const refreshAuthToken = async (
  response.cookies.set(ACCESS_TOKEN_COOKIE_NAME, newAccessToken, {
    httpOnly: true,
    secure: env.NODE_ENV === "production",
-    sameSite: "strict",
+    sameSite: "lax",
    path: "/",
    expires: add(new Date(), { hours: 1 }),
  });
--- a/apps/infoalloggi/src/server/controllers/auth.controller.ts
+++ b/apps/infoalloggi/src/server/controllers/auth.controller.ts
@ -29,7 +29,7 @@ import {
 const cookieOptions: OptionsType = {
  httpOnly: true,
  secure: env.NODE_ENV === "production",
-  sameSite: "strict",
+  sameSite: "lax",
  path: "/",
 };