#375: SameSite to None for social logins

basmasking · basmasking · commit 918ad2d5eecb · 2025-07-22T21:59:59.000+02:00
diff --git a/src/integrations/runtime/middlewares/OriginMiddleware.ts b/src/integrations/runtime/middlewares/OriginMiddleware.ts
@@ -85,6 +85,6 @@ export default class OriginMiddleware implements Middleware
 
     #setOriginCookie(response: Response, origin: string): void
     {
-        response.setHeader('Set-Cookie', `${TENANT_COOKIE_NAME}=${origin}; Path=/; HttpOnly=true; SameSite=Strict; Secure`);
+        response.setHeader('Set-Cookie', `${TENANT_COOKIE_NAME}=${origin}; Path=/; HttpOnly=true; SameSite=None; Secure`);
     }
 }

Original file line number	Diff line number	Diff line change
`@@ -85,6 +85,6 @@ export default class OriginMiddleware implements Middleware`
`85`	`85`
`86`	`86`	`#setOriginCookie(response: Response, origin: string): void`
`87`	`87`	`{`
`88`		- response.setHeader('Set-Cookie', `${TENANT_COOKIE_NAME}=${origin}; Path=/; HttpOnly=true; SameSite=Strict; Secure`);
	`88`	+ response.setHeader('Set-Cookie', `${TENANT_COOKIE_NAME}=${origin}; Path=/; HttpOnly=true; SameSite=None; Secure`);
`89`	`89`	`}`
`90`	`90`	`}`