same-site strict

This commit is contained in:
Samir Patel 2021-12-20 18:00:13 -06:00
parent d9710cb7d7
commit 10a7aa55ea

View file

@ -120,6 +120,7 @@ func (a *Auth) Logout(w http.ResponseWriter, r *http.Request) {
Path: "/",
Secure: true,
HttpOnly: true,
SameSite: http.SameSiteStrictMode,
}
http.SetCookie(w, newCookie)
redirect := fmt.Sprintf("%s?post_logout_redirect_uri=%s/", a.logoutEndpoint, a.fbURL)
@ -245,6 +246,7 @@ func (a *Auth) setCookie(w http.ResponseWriter, cookie *CookieValue) error {
Path: "/",
Secure: true,
HttpOnly: true,
SameSite: http.SameSiteStrictMode,
Expires: cookie.Token.Expiry,
}
http.SetCookie(w, newCookie)