samesite none so people can login from iframe

2020-01-14 17:42:04 +10:00 · 2020-01-14 17:42:04 +10:00 · 469a757646
commit 469a757646
parent 2a2102ceaa
1 changed files with 1 additions and 1 deletions
--- a/server/src/http.rs
+++ b/server/src/http.rs
@ -354,7 +354,7 @@ fn recover(req: &mut Request) -> IronResult<Response> {

    let v = Cookie::build(TOKEN_HEADER, token)
        .http_only(true)
-        .same_site(SameSite::Strict)
+        .same_site(SameSite::None)
        .path("/")
        .max_age(Duration::weeks(1)) // 1 week aligns with db set
        .finish();