chore: add same site attribute to the device trust cookie

teamhanko · Dec 13, 2024 · 72911e4 · 72911e4
1 parent 3961837
commit 72911e4
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/backend/flow_api/flow/device_trust/hook_issue_trust_device_cookie.go b/backend/flow_api/flow/device_trust/hook_issue_trust_device_cookie.go
@@ -60,6 +60,7 @@ func (h IssueTrustDeviceCookie) Execute(c flowpilot.HookExecutionContext) error
 	cookie.HttpOnly = true
 	cookie.Secure = true
 	cookie.MaxAge = maxAge
+	cookie.SameSite = http.SameSiteNoneMode
 
 	deps.HttpContext.SetCookie(cookie)