fix: update cookie settings for production and development modes

2026-03-12 17:25:19 +08:00
parent abbcb6bf5c
commit bfa0690065
1 changed files with 5 additions and 2 deletions
@@ -127,8 +127,11 @@ public class AuthService {
                .path("/");

        return switch (applicationMode) {
-            case PRODUCTION -> cookieBuilder.httpOnly(true);
-            case DEVELOPMENT -> cookieBuilder.sameSite("NONE");
+            case PRODUCTION -> cookieBuilder
+                    .httpOnly(true)
+                    .sameSite("LAX");
+            case DEVELOPMENT -> cookieBuilder
+                    .sameSite("NONE");
            case null -> cookieBuilder;
        };
    }