diff --git a/src/routes/api/v1/auth/login/+server.ts b/src/routes/api/v1/auth/login/+server.ts index 1c4219a..add2851 100644 --- a/src/routes/api/v1/auth/login/+server.ts +++ b/src/routes/api/v1/auth/login/+server.ts @@ -24,7 +24,10 @@ export async function POST({ request, cookies }) { const session = await createSession(user.id); - cookies.set(COOKIE, session.id, { path: '/', sameSite: 'strict' }); + let thirty_days = new Date(); + thirty_days.setDate(thirty_days.getDate() + 30); + + cookies.set(COOKIE, session.id, { path: '/', sameSite: 'lax', expires: thirty_days }); return json( { diff --git a/src/routes/api/v1/auth/register/+server.ts b/src/routes/api/v1/auth/register/+server.ts index baedbcc..1e61529 100644 --- a/src/routes/api/v1/auth/register/+server.ts +++ b/src/routes/api/v1/auth/register/+server.ts @@ -19,7 +19,10 @@ export async function POST({ request, cookies }) { const user = await createUser(username, email, password); const session = await createSession(user.id); - cookies.set(COOKIE, session.id, { path: '/', sameSite: 'strict' }); + let thirty_days = new Date(); + thirty_days.setDate(thirty_days.getDate() + 30); + + cookies.set(COOKIE, session.id, { path: '/', sameSite: 'lax', expires: thirty_days }); return json( {