From d41cf7a86c5ceeffd2c375c19288feb86aed523c Mon Sep 17 00:00:00 2001 From: Jon Seager Date: Tue, 25 Nov 2025 19:15:29 +0000 Subject: [PATCH] feat: switch to lax site policy for cookies --- src/server/routes/auth.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/server/routes/auth.rs b/src/server/routes/auth.rs index 137627c..287954e 100644 --- a/src/server/routes/auth.rs +++ b/src/server/routes/auth.rs @@ -90,7 +90,7 @@ pub(crate) async fn login_submit( let mut cookie = Cookie::new(SESSION_COOKIE_NAME, session_token); cookie.set_path("/"); cookie.set_http_only(true); - cookie.set_same_site(tower_cookies::cookie::SameSite::Strict); + cookie.set_same_site(tower_cookies::cookie::SameSite::Lax); // Enable secure flag if BREWLOG_SECURE_COOKIES is set to "true" // This should be enabled in production when serving over HTTPS