samesite

2026-04-23 04:25:51 +00:00 · 2026-04-21 21:06:07 +01:00
parent c9e96d489d
commit 7d7b291ea2
1 changed files with 1 additions and 1 deletions
@@ -49,7 +49,7 @@ export async function GET(req: Request) {
  res.cookies.set("access_token", data.access_token, {
    httpOnly: true,
    secure: isHttps,
-    sameSite: "none",
+    sameSite: isHttps ? "none" : "lax",
    path: "/",
    ...(env.COOKIE_DOMAIN ? { domain: env.COOKIE_DOMAIN } : {}),
    maxAge: data.expires_in,