fixes SameSite cookie issue
This commit is contained in:
@@ -5,5 +5,6 @@ import { currentUser } from '$lib/stores/user_store';
|
|||||||
pb.authStore.loadFromCookie(document.cookie)
|
pb.authStore.loadFromCookie(document.cookie)
|
||||||
pb.authStore.onChange(() => {
|
pb.authStore.onChange(() => {
|
||||||
currentUser.set(pb.authStore.model as User)
|
currentUser.set(pb.authStore.model as User)
|
||||||
document.cookie = pb.authStore.exportToCookie({ httpOnly: false, secure: location.protocol === "https:" || location.hostname === "localhost", sameSite: 'none' })
|
const secure = location.protocol === "https:"
|
||||||
|
document.cookie = pb.authStore.exportToCookie({ httpOnly: false, secure: secure, sameSite: "Lax" })
|
||||||
}, true)
|
}, true)
|
||||||
@@ -103,9 +103,11 @@ const auth: Handle = async ({ event, resolve }) => {
|
|||||||
const response = await resolve(event)
|
const response = await resolve(event)
|
||||||
|
|
||||||
// send back the default 'pb_auth' cookie to the client with the latest store state
|
// send back the default 'pb_auth' cookie to the client with the latest store state
|
||||||
|
const secure = event.url.protocol === "https:"
|
||||||
|
|
||||||
response.headers.set(
|
response.headers.set(
|
||||||
'set-cookie',
|
'set-cookie',
|
||||||
pb.authStore.exportToCookie({ httpOnly: false, secure: event.url.protocol === "https:" || event.url.hostname === "localhost", sameSite: "none" })
|
pb.authStore.exportToCookie({ httpOnly: false, secure: secure, sameSite: "Lax" })
|
||||||
)
|
)
|
||||||
|
|
||||||
return response
|
return response
|
||||||
|
|||||||
Reference in New Issue
Block a user