add: cookie에 samesite=none 추가

Collusic · Jun 15, 2024 · 8376e9e · 8376e9e
1 parent 76c8f45
commit 8376e9e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/main/java/com/climingo/climingoApi/auth/util/CookieUtils.java b/src/main/java/com/climingo/climingoApi/auth/util/CookieUtils.java
@@ -7,6 +7,7 @@
 import java.net.URISyntaxException;
 import java.util.Arrays;
 import java.util.Optional;
+import org.apache.tomcat.util.descriptor.web.Constants;
 
 // [reference] https://velog.io/@cutepassions/spring-security-%EC%84%A4%EC%A0%95-3-cookie
 public class CookieUtils {
@@ -39,9 +40,11 @@ public static void addCookie(HttpServletRequest request, HttpServletResponse res
             cookie.setDomain(domain);
         }
 
+        cookie.setSecure(true);
         cookie.setPath("/");
         cookie.setHttpOnly(true);
         cookie.setMaxAge(maxAge);
+        cookie.setAttribute(Constants.COOKIE_SAME_SITE_ATTR, "None");
         response.addCookie(cookie);
     }