set samesite to strict

This commit is contained in:
cirroskais 2024-08-02 10:56:30 -04:00
parent 4c3f4d719f
commit fa8d7b4223
No known key found for this signature in database
GPG key ID: 5FC73EBF2678E33D
4 changed files with 4 additions and 3 deletions

View file

@ -24,7 +24,7 @@ export async function POST({ request, cookies }) {
const session = await createSession(user.id);
cookies.set(COOKIE, session.id, { path: '/' });
cookies.set(COOKIE, session.id, { path: '/', sameSite: 'strict' });
return json(
{

View file

@ -19,7 +19,7 @@ export async function POST({ request, cookies }) {
const user = await createUser(username, email, password);
const session = await createSession(user.id);
cookies.set(COOKIE, session.id, { path: '/' });
cookies.set(COOKIE, session.id, { path: '/', sameSite: 'strict' });
return json(
{

View file

@ -4,7 +4,8 @@ import { vitePreprocess } from '@sveltejs/vite-plugin-svelte';
/** @type {import('@sveltejs/kit').Config} */
const config = {
kit: {
adapter: adapter()
adapter: adapter(),
csrf: { checkOrigin: false }
},
preprocess: vitePreprocess()
};