SameSite=Strict breaks multisite

This commit is contained in:
Alexandre Aubin 2018-11-19 16:06:12 +00:00
parent 2699aa8db7
commit 7be6e76cb8

View file

@ -148,7 +148,7 @@ function set_auth_cookie(user, domain)
"; Expires="..os.date("%a, %d %b %Y %X UTC", expire)..
"; Secure"..
"; HttpOnly"..
"; SameSite=Strict ;;"
"; SameSite=Lax ;;"
ngx.header["Set-Cookie"] = {
"SSOwAuthUser="..user..cookie_str,
@ -169,7 +169,7 @@ function delete_cookie()
"; Expires="..expired_time..
"; Secure"..
"; HttpOnly"..
"; SameSite=Strict ;;"
"; SameSite=Lax ;;"
ngx.header["Set-Cookie"] = {
"SSOwAuthUser="..cookie_str,
"SSOwAuthHash="..cookie_str,
@ -186,7 +186,7 @@ function delete_redirect_cookie()
"; Expires="..expired_time..
"; Secure"..
"; HttpOnly"..
"; SameSite=Strict ;;"
"; SameSite=Lax ;;"
ngx.header["Set-Cookie"] = "SSOwAuthRedirect=;" ..cookie_str
end