Merge pull request #27 from open-cluster-management/SameSite-LAX

change samesite to Lax
stolostron · Apr 20, 2020 · 54a2cec · 54a2cec
2 parents 2172b81 + db8ae55
commit 54a2cec
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rootfs/opt/ibm/router/nginx/conf/oauthproxy.lua b/rootfs/opt/ibm/router/nginx/conf/oauthproxy.lua
@@ -95,7 +95,7 @@ local function validate_access_token_or_exit()
                 -- set cookie, max age 12h in seconds
                 local ok, err = cookie:set({
                   key = "acm-access-token-cookie", value = forwarded_token, path = "/",
-                  max_age = 43200, httponly = true, samesite = "Strict", secure = true
+                  max_age = 43200, httponly = true, samesite = "Lax", secure = true
                 })
                 if err ~= nil then
                     ngx.log(ngx.NOTICE, "Error setting the cookie", err)