src-advisory/SRCmail
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: honor cookieSameSite admin config override #284

Browse Source
This commit is contained in:
Linus Rath
2026-05-14 21:49:37 +02:00
parent c646c87030
commit fae15f073e
2 changed files with 16 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/oauth/cookie-config.ts
+9 -6
View File
@@ -1,13 +1,16 @@
const COOKIE_SAME_SITE = (process.env.COOKIE_SAME_SITE || 'lax') as 'lax' | 'none' | 'strict';
const COOKIE_SECURE = process.env.COOKIE_SECURE !== undefined
? process.env.COOKIE_SECURE === 'true'
: (COOKIE_SAME_SITE === 'none' || process.env.NODE_ENV === 'production');
import { configManager } from '@/lib/admin/config-manager';
type SameSite = 'lax' | 'none' | 'strict';
export function getCookieOptions() {
const sameSite = configManager.get<SameSite>('cookieSameSite', 'lax');
const secure = process.env.COOKIE_SECURE !== undefined
? process.env.COOKIE_SECURE === 'true'
: (sameSite === 'none' || process.env.NODE_ENV === 'production');
return {
httpOnly: true,
secure: COOKIE_SECURE,
sameSite: COOKIE_SAME_SITE,
secure,
sameSite,
path: '/',
maxAge: 30 * 24 * 60 * 60,
};