all cookies sameSite as Strict for pkce

iress · Sep 25, 2023 · 6fc36a2 · 6fc36a2
1 parent f4c0e44
commit 6fc36a2
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/authn/pkce.index.js b/authn/pkce.index.js
@@ -185,6 +185,7 @@ function mainProcess(event, context, callback) {
                           path: '/',
                           httpOnly: true,
                           secure: true,
+                          sameSite: 'strict',
                           maxAge: parseInt(config.SESSION_DURATION)
                         })
                       },
@@ -328,14 +329,16 @@ function redirect(request, headers, callback) {
           "key": "Set-Cookie",
           "value" : cookie.serialize('NONCE', n[1], {
             path: '/',
-            httpOnly: true
+            httpOnly: true,
+            sameSite: 'strict'
           })
         },
         {
           "key": "Set-Cookie",
           "value" : cookie.serialize('CV', challenge[0], {
             path: '/',
-            httpOnly: true
+            httpOnly: true,
+            sameSite: 'strict'
           })
         }
       ],