test lax JWT cookie

theopensystemslab · Oct 31, 2024 · fd21b41 · fd21b41
1 parent b8b41f4
commit fd21b41
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/api.planx.uk/modules/auth/controller.ts b/api.planx.uk/modules/auth/controller.ts
@@ -40,7 +40,7 @@ function setJWTCookie(returnTo: string, res: Response, req: Request) {
       new Date().setFullYear(new Date().getFullYear() + 1),
     ).getTime(),
     // the JWT/auth cookies should be sent only between the API server and editor
-    sameSite: "strict",
+    sameSite: "lax",
     secure: true,
   };