diff options
| author | Eugen Rochko <eugen@zeonfederated.com> | 2020-11-06 11:57:14 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-11-06 11:57:14 +0100 |
| commit | acc1c038610a82d8470acde6753716da0dc4b1fa (patch) | |
| tree | 18aa4e0c94907f653e07ca8c1e373a8882cced9c /config/initializers/devise.rb | |
| parent | 9b1f2a4b61660f9a8be62f6296d97a856e376059 (diff) | |
Fix cookies not having a SameSite attribute (#15098)
Diffstat (limited to 'config/initializers/devise.rb')
| -rw-r--r-- | config/initializers/devise.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/config/initializers/devise.rb b/config/initializers/devise.rb index 59e69ad37..ef612e177 100644 --- a/config/initializers/devise.rb +++ b/config/initializers/devise.rb @@ -10,6 +10,7 @@ Warden::Manager.after_set_user except: :fetch do |user, warden| expires: 1.year.from_now, httponly: true, secure: (Rails.env.production? || ENV['LOCAL_HTTPS'] == 'true'), + same_site: :lax, } end @@ -20,6 +21,7 @@ Warden::Manager.after_fetch do |user, warden| expires: 1.year.from_now, httponly: true, secure: (Rails.env.production? || ENV['LOCAL_HTTPS'] == 'true'), + same_site: :lax, } else warden.logout |