Merge pull request #136 from MaanasArora/bug/samesite-strict

MaanasArora · web-flow · commit 9da5dd4788c4 · 2025-08-27T19:42:04.000-04:00
fix: update SameSite attribute for access token cookie to 'none'
diff --git a/server/convergent/routers/auth.py b/server/convergent/routers/auth.py
@@ -76,7 +76,7 @@ async def login(
         value=access_token,
         httponly=True,
         secure=True,
-        samesite="strict",
+        samesite="none",
     )
     return {"access_token": access_token, "token_type": "bearer"}
 

Original file line number	Diff line number	Diff line change
`@@ -76,7 +76,7 @@ async def login(`
`76`	`76`	`value=access_token,`
`77`	`77`	`httponly=True,`
`78`	`78`	`secure=True,`
`79`		`- samesite="strict",`
	`79`	`+ samesite="none",`
`80`	`80`	`)`
`81`	`81`	`return {"access_token": access_token, "token_type": "bearer"}`
`82`	`82`