From 013ea9006352ed714cbbd561880770062ea3a0e9 Mon Sep 17 00:00:00 2001
From: Hassan Abouelela <47495861+HassanAbouelela@users.noreply.github.com>
Date: Sat, 6 Mar 2021 23:19:08 +0300
Subject: Sets Token Cookie To Same Site To Lax

Sets the authorization token cookie's security policy to lax, to allow
it to work on the site.

Signed-off-by: Hassan Abouelela <47495861+HassanAbouelela@users.noreply.github.com>
---
 backend/routes/auth/authorize.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'backend/routes/auth')

diff --git a/backend/routes/auth/authorize.py b/backend/routes/auth/authorize.py
index 26d8622..e00aef2 100644
--- a/backend/routes/auth/authorize.py
+++ b/backend/routes/auth/authorize.py
@@ -63,7 +63,7 @@ async def process_token(bearer_token: dict) -> Union[AuthorizeResponse, AUTH_FAI
 
     response.set_cookie(
         "token", f"JWT {token}",
-        secure=constants.PRODUCTION, httponly=True, samesite="strict",
+        secure=constants.PRODUCTION, httponly=True, samesite="lax",
         max_age=bearer_token["expires_in"]
     )
     return response
-- 
cgit v1.2.3