2 parents 7832734 + 2d4cc82 commit 2ae1dc4Copy full SHA for 2ae1dc4
1 file changed
server/app/controllers/authController.js
@@ -37,10 +37,11 @@ function generateOtp() {
37
}
38
39
const COOKIE_NAME = process.env.COOKIE_NAME || "sc_token";
40
+const isProd = process.env.NODE_ENV === "production";
41
const COOKIE_OPTS = {
42
httpOnly: true,
- secure: process.env.NODE_ENV === "production",
43
- sameSite: "lax",
+ secure: isProd,
44
+ sameSite: isProd ? "none" : "lax",
45
maxAge: parseInt(process.env.JWT_COOKIE_MAX_AGE) || 604800000,
46
};
47
0 commit comments