fix: set same site cookie to none for cross site
This commit is contained in:
parent
aa6601e62c
commit
cfbce17ab8
|
@ -38,6 +38,8 @@ func SetSession(gc *gin.Context, sessionID string) {
|
||||||
// TODO add ability to sameSite = none / strict from dashboard
|
// TODO add ability to sameSite = none / strict from dashboard
|
||||||
if !appCookieSecure {
|
if !appCookieSecure {
|
||||||
gc.SetSameSite(http.SameSiteLaxMode)
|
gc.SetSameSite(http.SameSiteLaxMode)
|
||||||
|
} else {
|
||||||
|
gc.SetSameSite(http.SameSiteNoneMode)
|
||||||
}
|
}
|
||||||
// TODO allow configuring from dashboard
|
// TODO allow configuring from dashboard
|
||||||
year := 60 * 60 * 24 * 365
|
year := 60 * 60 * 24 * 365
|
||||||
|
|
Loading…
Reference in New Issue
Block a user