fix: update SameSite cookie attribute to 'none' for cross-site requests

2025-08-07 14:10:33 +02:00 · 2025-08-07 14:10:33 +02:00 · fe5aed075f
parent eef81d7409
commit fe5aed075f
1 changed files with 1 additions and 1 deletions
--- a/server/api/auth/direct-login.post.ts
+++ b/server/api/auth/direct-login.post.ts
@ -322,7 +322,7 @@ export default defineEventHandler(async (event) => {
      setCookie(event, 'monacousa-session', encrypted, {
        httpOnly: true,
        secure: true,
-        sameSite: 'lax',
+        sameSite: 'none',
        maxAge,
        path: '/',
      });