fix: set same site cookie to none for cross site
This commit is contained in:
@@ -38,6 +38,8 @@ func SetSession(gc *gin.Context, sessionID string) {
|
||||
// TODO add ability to sameSite = none / strict from dashboard
|
||||
if !appCookieSecure {
|
||||
gc.SetSameSite(http.SameSiteLaxMode)
|
||||
} else {
|
||||
gc.SetSameSite(http.SameSiteNoneMode)
|
||||
}
|
||||
// TODO allow configuring from dashboard
|
||||
year := 60 * 60 * 24 * 365
|
||||
|
Reference in New Issue
Block a user