From 10a7aa55eaa47b0814a7bc4a300b2866655d4aa1 Mon Sep 17 00:00:00 2001
From: Samir Patel <48686912+54mir@users.noreply.github.com>
Date: Mon, 20 Dec 2021 18:00:13 -0600
Subject: [PATCH] same-site strict

---
 authn/authenticate.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/authn/authenticate.go b/authn/authenticate.go
index 64e8e5a9e..af16bf28b 100644
--- a/authn/authenticate.go
+++ b/authn/authenticate.go
@@ -120,6 +120,7 @@ func (a *Auth) Logout(w http.ResponseWriter, r *http.Request) {
 		Path:     "/",
 		Secure:   true,
 		HttpOnly: true,
+		SameSite: http.SameSiteStrictMode,
 	}
 	http.SetCookie(w, newCookie)
 	redirect := fmt.Sprintf("%s?post_logout_redirect_uri=%s/", a.logoutEndpoint, a.fbURL)
@@ -245,6 +246,7 @@ func (a *Auth) setCookie(w http.ResponseWriter, cookie *CookieValue) error {
 		Path:     "/",
 		Secure:   true,
 		HttpOnly: true,
+		SameSite: http.SameSiteStrictMode,
 		Expires:  cookie.Token.Expiry,
 	}
 	http.SetCookie(w, newCookie)