set samesite to strict

This commit is contained in:
cirroskais 2024-08-02 10:56:30 -04:00
parent 4c3f4d719f
commit fa8d7b4223
No known key found for this signature in database
GPG key ID: 5FC73EBF2678E33D
4 changed files with 4 additions and 3 deletions

View file

@ -24,7 +24,7 @@ export async function POST({ request, cookies }) {
const session = await createSession(user.id); const session = await createSession(user.id);
cookies.set(COOKIE, session.id, { path: '/' }); cookies.set(COOKIE, session.id, { path: '/', sameSite: 'strict' });
return json( return json(
{ {

View file

@ -19,7 +19,7 @@ export async function POST({ request, cookies }) {
const user = await createUser(username, email, password); const user = await createUser(username, email, password);
const session = await createSession(user.id); const session = await createSession(user.id);
cookies.set(COOKIE, session.id, { path: '/' }); cookies.set(COOKIE, session.id, { path: '/', sameSite: 'strict' });
return json( return json(
{ {

View file

@ -4,7 +4,8 @@ import { vitePreprocess } from '@sveltejs/vite-plugin-svelte';
/** @type {import('@sveltejs/kit').Config} */ /** @type {import('@sveltejs/kit').Config} */
const config = { const config = {
kit: { kit: {
adapter: adapter() adapter: adapter(),
csrf: { checkOrigin: false }
}, },
preprocess: vitePreprocess() preprocess: vitePreprocess()
}; };