samesite none so people can login from iframe
This commit is contained in:
parent
2a2102ceaa
commit
469a757646
@ -354,7 +354,7 @@ fn recover(req: &mut Request) -> IronResult<Response> {
|
|||||||
|
|
||||||
let v = Cookie::build(TOKEN_HEADER, token)
|
let v = Cookie::build(TOKEN_HEADER, token)
|
||||||
.http_only(true)
|
.http_only(true)
|
||||||
.same_site(SameSite::Strict)
|
.same_site(SameSite::None)
|
||||||
.path("/")
|
.path("/")
|
||||||
.max_age(Duration::weeks(1)) // 1 week aligns with db set
|
.max_age(Duration::weeks(1)) // 1 week aligns with db set
|
||||||
.finish();
|
.finish();
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user