fix: update SameSite cookie attribute to 'none' for cross-site requests

server/api/auth/direct-login.post.ts

@@ -322,7 +322,7 @@ export default defineEventHandler(async (event) => {
       setCookie(event, 'monacousa-session', encrypted, {
         httpOnly: true,
         secure: true,
-        sameSite: 'lax',
+        sameSite: 'none',
         maxAge,
         path: '/',
       });