the antiforgery token is different

ministryofjustice · Aug 15, 2024 · 7fa0e43 · 7fa0e43
1 parent 17de237
commit 7fa0e43
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/src/Server.UI/DependencyInjection.cs b/src/Server.UI/DependencyInjection.cs
@@ -31,10 +31,17 @@ public static WebApplicationBuilder AddServerUi(this WebApplicationBuilder build
         var services = builder.Services;
         var config = builder.Configuration;
         var environment = builder.Environment;
-
+
+
+        CookieSecurePolicy policy = CookieSecurePolicy.SameAsRequest;
+        if(config["IdentitySettings:SecureCookies"] is not null && config["IdentitySettings:SecureCookies"]!.Equals("True", StringComparison.CurrentCultureIgnoreCase))
+        {
+            policy = CookieSecurePolicy.Always;
+        }
+
         services.AddAntiforgery(options =>
         {
-            options.Cookie.SecurePolicy = CookieSecurePolicy.SameAsRequest;
+            options.Cookie.SecurePolicy = policy;
         });
 
         services.AddRazorComponents().AddInteractiveServerComponents();