signable headers and sameSite lax

hicommonwealth · Oct 23, 2024 · 0351bef · 0351bef
1 parent 8fab6ec
commit 0351bef
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/libs/adapters/src/blobStorage/util.ts b/libs/adapters/src/blobStorage/util.ts
@@ -31,6 +31,7 @@ export async function getSignedUrl_S3sdk(
     }),
     {
       expiresIn: options.ttl,
+      signableHeaders: new Set(['content-type']),
     },
   );
 }

diff --git a/packages/commonwealth/main.ts b/packages/commonwealth/main.ts
@@ -82,6 +82,7 @@ export async function main(
     saveUninitialized: false,
     cookie: {
       maxAge: config.AUTH.SESSION_EXPIRY_MILLIS,
+      sameSite: 'lax',
     },
   });
-Original file line number
+Diff line change
@@ Expand Up / @@ -31,6 +31,7 @@ export async function getSignedUrl_S3sdk( @@
         }),
         {
           expiresIn: options.ttl,
+          signableHeaders: new Set(['content-type']),
         },
       );
     }
@@ Expand Down @@