Merged branch bugfix/a-very-tricky-bugfix into develop

horia141 · Oct 18, 2024 · 6378e31 · 6378e31
1 parent d5ec617
commit 6378e31
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/webui/app/sessions.ts b/src/webui/app/sessions.ts
@@ -25,7 +25,7 @@ const { getSession, commitSession, destroySession } =
       httpOnly: true,
       maxAge: 60 * 60 * 24 * 30, // 30 days
       path: "/",
-      sameSite: "strict",
+      sameSite: "lax", // Not strict because of https://github.com/oauth2-proxy/oauth2-proxy/issues/830
       secure: GLOBAL_PROPERTIES.env === Env.LOCAL ? false : true,
       secrets: [GLOBAL_PROPERTIES.sessionCookieSecret],
     },