fix: set same site cookie to none for cross site

2022-09-28 18:42:42 +05:30
1 changed files with 2 additions and 0 deletions
--- a/server/cookie/cookie.go
+++ b/server/cookie/cookie.go
@@ -38,6 +38,8 @@ func SetSession(gc *gin.Context, sessionID string) {
 	// TODO add ability to sameSite = none / strict from dashboard
 	if !appCookieSecure {
 		gc.SetSameSite(http.SameSiteLaxMode)
+	} else {
+		gc.SetSameSite(http.SameSiteNoneMode)
 	}
 	// TODO allow configuring from dashboard
 	year := 60 * 60 * 24 * 365