[server] Set same site cookie

2026-01-06 03:31:02 -06:00 · 2025-04-28 23:08:39 +05:30
parent 76f8074a1d
commit 4968c49318
1 changed files with 1 additions and 0 deletions
--- a/server/internal/api/v1/auth/routes.go
+++ b/server/internal/api/v1/auth/routes.go
@@ -61,5 +61,6 @@ func handleSetCookie(c *gin.Context) {
 		panic(errors.NewError(http.StatusBadRequest, "missing_token", "Auth Token Not Specified"))
 	}
 	secure := c.Request.URL.Scheme == "https"
+	c.SetSameSite(http.SameSiteStrictMode)
 	c.SetCookie("auth_token", token, 3600, "", c.Request.URL.Hostname(), secure, true)
 }