cookie policy set sameSite as none for cross platform

Md-Rubel-Ahmed-Rana · Jul 6, 2024 · d10ca6a · d10ca6a
1 parent bf40a9d
commit d10ca6a
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 4 deletions.
diff --git a/backend/dist/controllers/googleOAuth.controller.js b/backend/dist/controllers/googleOAuth.controller.js
@@ -24,7 +24,7 @@ class Controller extends rootController_1.default {
                 const result = yield googleOAuth_service_1.GoogleOAuthService.login(req.user);
                 res.cookie("tmAccessToken", result, {
                     httpOnly: true,
-                    sameSite: "lax",
+                    sameSite: "none",
                     secure: true,
                 });
                 res.redirect(envConfig_1.config.google.redirectUrl);

diff --git a/backend/dist/controllers/user.controller.js b/backend/dist/controllers/user.controller.js
@@ -62,7 +62,7 @@ class Controller extends rootController_1.default {
             const result = yield user_service_1.UserService.login(email, password);
             res.cookie("tmAccessToken", result, {
                 httpOnly: true,
-                sameSite: "lax",
+                sameSite: "none",
                 secure: true,
             });
             this.apiResponse(res, {

diff --git a/backend/src/controllers/googleOAuth.controller.ts b/backend/src/controllers/googleOAuth.controller.ts
@@ -9,7 +9,7 @@ class Controller extends RootController {
       const result: string = await GoogleOAuthService.login(req.user);
       res.cookie("tmAccessToken", result, {
         httpOnly: true,
-        sameSite: "lax",
+        sameSite: "none",
         secure: true,
       });
       res.redirect(config.google.redirectUrl);

diff --git a/backend/src/controllers/user.controller.ts b/backend/src/controllers/user.controller.ts
@@ -52,7 +52,7 @@ class Controller extends RootController {
     const result = await UserService.login(email, password);
     res.cookie("tmAccessToken", result, {
       httpOnly: true,
-      sameSite: "lax",
+      sameSite: "none",
       secure: true,
     });
     this.apiResponse(res, {