Improve cookie settings

2026-02-06 18:27:54 -08:00 · 2026-02-06 18:27:54 -08:00 · 3adf7b7f74
commit 3adf7b7f74
parent fb44139e1d
1 changed files with 4 additions and 2 deletions
--- a/src/callback.ts
+++ b/src/callback.ts
@ -72,13 +72,15 @@ export const createSfAuthCallbackRoute = (

    response.cookies.set(cookieNames.userId, userId, {
      httpOnly: true,
-      sameSite: "lax",
+      sameSite: "strict",
+      secure: true,
      path: "/"
    });

    response.cookies.set(cookieNames.username, username, {
      httpOnly: true,
-      sameSite: "lax",
+      sameSite: "strict",
+      secure: true,
      path: "/"
    });