Fix same site policy

Die-Antwoord · Feb 27, 2022 · 6af6950 · 6af6950
1 parent 7cfd116
commit 6af6950
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/func/oauth.js b/func/oauth.js
@@ -9,7 +9,7 @@ export async function handler(event, context) {
         statusCode: 303,
         headers: {
             "Location": `https://discord.com/api/oauth2/authorize?client_id=${encodeURIComponent(process.env.DISCORD_CLIENT_ID)}&redirect_uri=${encodeURIComponent(redirectUri)}&response_type=code&scope=identify&prompt=none&state=${state}`,
-            "Set-Cookie": `__Secure-CSRFState=${state}; Domain=${DEPLOY_PRIME_URL.replace("https://", "")}; Path=/.netlify/functions/oauth-callback; Secure; HttpOnly; SameSite=Strict`
+            "Set-Cookie": `__Secure-CSRFState=${state}; Domain=${DEPLOY_PRIME_URL.replace("https://", "")}; Path=/.netlify/functions/oauth-callback; Secure; HttpOnly; SameSite=Lax`
         }
     };
 }