X-Git-Url: http://git.squeep.com/?p=squeep-authentication-module;a=blobdiff_plain;f=lib%2Fsession-manager.js;h=bd08eef26e7cc44d11473b53bfcd3a8a1e2f6e4f;hp=a97a0e0fd3f0edf2ed897e89c9f565e41843525c;hb=5b90f0a97b1f49b19d395ffe2cf14dda12d87fc9;hpb=92658b114da01ab5537c53dee7ff5ad6385fe179 diff --git a/lib/session-manager.js b/lib/session-manager.js index a97a0e0..bd08eef 100644 --- a/lib/session-manager.js +++ b/lib/session-manager.js @@ -51,6 +51,7 @@ class SessionManager { const cookieParts = [ `${cookieName}=${secureSession}`, 'HttpOnly', + 'SameSite=Lax', ]; if (this.options.authenticator.secureAuthOnly) { cookieParts.push('Secure'); @@ -345,4 +346,4 @@ class SessionManager { } -module.exports = SessionManager; \ No newline at end of file +module.exports = SessionManager;