fix: allow oauth_state token to be cross-domain

External OIDC providers won’t work with the current setup.
This commit is contained in:
Peter Olds 2025-01-12 13:21:33 -08:00
parent 51f6391ded
commit 8495e387b1
No known key found for this signature in database

View file

@ -60,7 +60,8 @@ func OIDCLoginHandler(w http.ResponseWriter, r *http.Request) {
Value: state,
MaxAge: 300,
HttpOnly: true,
SameSite: http.SameSiteStrictMode,
SameSite: http.SameSiteNoneMode,
Secure: true,
Path: "/",
})