lashman/echoboard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

switch all cookies from sameSite strict to lax for proxy compatibility

Browse Source
This commit is contained in:
lashman
2026-03-21 23:37:04 +02:00
parent cdb9e5d8ee
commit 320e724ac8
5 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
packages/api/src/routes/admin/auth.ts
View File

@@ -89,12 +89,12 @@ export default async function adminAuthRoutes(app: FastifyInstance) {
reply reply
.setCookie("echoboard_admin", adminToken, { .setCookie("echoboard_admin", adminToken, {
path: "/", httpOnly: true, sameSite: "strict", path: "/", httpOnly: true, sameSite: "lax",
secure: process.env.NODE_ENV === "production", secure: process.env.NODE_ENV === "production",
maxAge: 60 * 60 * 4, maxAge: 60 * 60 * 4,
}) })
.setCookie("echoboard_passkey", userToken, { .setCookie("echoboard_passkey", userToken, {
path: "/", httpOnly: true, sameSite: "strict", path: "/", httpOnly: true, sameSite: "lax",
secure: process.env.NODE_ENV === "production", secure: process.env.NODE_ENV === "production",
maxAge: 60 * 60 * 4, maxAge: 60 * 60 * 4,
}) })
@@ -151,14 +151,14 @@ export default async function adminAuthRoutes(app: FastifyInstance) {
.setCookie("echoboard_admin", adminToken, { .setCookie("echoboard_admin", adminToken, {
path: "/", path: "/",
httpOnly: true, httpOnly: true,
sameSite: "strict", sameSite: "lax",
secure: process.env.NODE_ENV === "production", secure: process.env.NODE_ENV === "production",
maxAge: 60 * 60 * 4, maxAge: 60 * 60 * 4,
}) })
.setCookie("echoboard_passkey", userToken, { .setCookie("echoboard_passkey", userToken, {
path: "/", path: "/",
httpOnly: true, httpOnly: true,
sameSite: "strict", sameSite: "lax",
secure: process.env.NODE_ENV === "production", secure: process.env.NODE_ENV === "production",
maxAge: 60 * 60 * 4, maxAge: 60 * 60 * 4,
}) })

6
packages/api/src/routes/admin/team.ts
View File

@@ -338,17 +338,17 @@ export default async function adminTeamRoutes(app: FastifyInstance) {
reply reply
.setCookie("echoboard_token", sessionToken, { .setCookie("echoboard_token", sessionToken, {
path: "/", httpOnly: true, sameSite: "strict", path: "/", httpOnly: true, sameSite: "lax",
secure: process.env.NODE_ENV === "production", secure: process.env.NODE_ENV === "production",
maxAge: 60 * 60 * 24 * 90, maxAge: 60 * 60 * 24 * 90,
}) })
.setCookie("echoboard_admin", adminJwt, { .setCookie("echoboard_admin", adminJwt, {
path: "/", httpOnly: true, sameSite: "strict", path: "/", httpOnly: true, sameSite: "lax",
secure: process.env.NODE_ENV === "production", secure: process.env.NODE_ENV === "production",
maxAge: 60 * 60 * 24, maxAge: 60 * 60 * 24,
}) })
.setCookie("echoboard_passkey", userJwt, { .setCookie("echoboard_passkey", userJwt, {
path: "/", httpOnly: true, sameSite: "strict", path: "/", httpOnly: true, sameSite: "lax",
secure: process.env.NODE_ENV === "production", secure: process.env.NODE_ENV === "production",
maxAge: 60 * 60 * 24, maxAge: 60 * 60 * 24,
}) })

2
packages/api/src/routes/identity.ts
View File

@@ -28,7 +28,7 @@ export default async function identityRoutes(app: FastifyInstance) {
.setCookie("echoboard_token", token, { .setCookie("echoboard_token", token, {
path: "/", path: "/",
httpOnly: true, httpOnly: true,
sameSite: "strict", sameSite: "lax",
secure: process.env.NODE_ENV === "production", secure: process.env.NODE_ENV === "production",
maxAge: 60 * 60 * 24 * 90, maxAge: 60 * 60 * 24 * 90,
}) })

2
packages/api/src/routes/passkey.ts
View File

@@ -274,7 +274,7 @@ export default async function passkeyRoutes(app: FastifyInstance) {
.setCookie("echoboard_passkey", token, { .setCookie("echoboard_passkey", token, {
path: "/", path: "/",
httpOnly: true, httpOnly: true,
sameSite: "strict", sameSite: "lax",
secure: process.env.NODE_ENV === "production", secure: process.env.NODE_ENV === "production",
maxAge: 60 * 60 * 24, maxAge: 60 * 60 * 24,
}) })

2
packages/api/src/routes/recovery.ts
View File

@@ -132,7 +132,7 @@ export default async function recoveryRoutes(app: FastifyInstance) {
.setCookie("echoboard_token", token, { .setCookie("echoboard_token", token, {
path: "/", path: "/",
httpOnly: true, httpOnly: true,
sameSite: "strict", sameSite: "lax",
secure: process.env.NODE_ENV === "production", secure: process.env.NODE_ENV === "production",
maxAge: 60 * 60 * 24 * 90, maxAge: 60 * 60 * 24 * 90,
}) })