diff --git a/backend/dist/controllers/googleOAuth.controller.js b/backend/dist/controllers/googleOAuth.controller.js index 50a377f..7b26320 100644 --- a/backend/dist/controllers/googleOAuth.controller.js +++ b/backend/dist/controllers/googleOAuth.controller.js @@ -24,7 +24,7 @@ class Controller extends rootController_1.default { const result = yield googleOAuth_service_1.GoogleOAuthService.login(req.user); res.cookie("tmAccessToken", result, { httpOnly: true, - sameSite: "lax", + sameSite: "none", secure: true, }); res.redirect(envConfig_1.config.google.redirectUrl); diff --git a/backend/dist/controllers/user.controller.js b/backend/dist/controllers/user.controller.js index 6f28d6b..2230d28 100644 --- a/backend/dist/controllers/user.controller.js +++ b/backend/dist/controllers/user.controller.js @@ -62,7 +62,7 @@ class Controller extends rootController_1.default { const result = yield user_service_1.UserService.login(email, password); res.cookie("tmAccessToken", result, { httpOnly: true, - sameSite: "lax", + sameSite: "none", secure: true, }); this.apiResponse(res, { diff --git a/backend/src/controllers/googleOAuth.controller.ts b/backend/src/controllers/googleOAuth.controller.ts index 52b3968..fd7c5a1 100644 --- a/backend/src/controllers/googleOAuth.controller.ts +++ b/backend/src/controllers/googleOAuth.controller.ts @@ -9,7 +9,7 @@ class Controller extends RootController { const result: string = await GoogleOAuthService.login(req.user); res.cookie("tmAccessToken", result, { httpOnly: true, - sameSite: "lax", + sameSite: "none", secure: true, }); res.redirect(config.google.redirectUrl); diff --git a/backend/src/controllers/user.controller.ts b/backend/src/controllers/user.controller.ts index 071220e..74a157d 100644 --- a/backend/src/controllers/user.controller.ts +++ b/backend/src/controllers/user.controller.ts @@ -52,7 +52,7 @@ class Controller extends RootController { const result = await UserService.login(email, password); res.cookie("tmAccessToken", result, { httpOnly: true, - sameSite: "lax", + sameSite: "none", secure: true, }); this.apiResponse(res, {