fix(auth): cookie same-site

ChatSift · Aug 5, 2024 · 2bb7648 · 2bb7648
1 parent be3f78f
commit 2bb7648
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/services/api/src/struct/Auth.ts b/services/api/src/struct/Auth.ts
@@ -59,7 +59,7 @@ export class Auth {
 		const options: CookieSerializeOptions = {
 			expires: credentials.refresh.expiration,
 			path: '/',
-			sameSite: Env.NODE_ENV === 'prod' ? 'none' : 'strict',
+			sameSite: Env.NODE_ENV === 'prod' ? 'strict' : 'lax',
 			httpOnly: true,
 			domain: Env.NODE_ENV === 'prod' ? `.${Env.ROOT_DOMAIN}` : undefined,
 			secure: Env.NODE_ENV === 'prod',
@@ -73,7 +73,7 @@ export class Auth {
 		const options: CookieSerializeOptions = {
 			expires: new Date(1_970),
 			path: '/',
-			sameSite: Env.NODE_ENV === 'prod' ? 'none' : 'strict',
+			sameSite: Env.NODE_ENV === 'prod' ? 'strict' : 'lax',
 			httpOnly: true,
 			domain: Env.NODE_ENV === 'prod' ? '.automoderator.app' : undefined,
 			secure: Env.NODE_ENV === 'prod',