fix: Missing SameSite attribute on options

gorilla · Aug 20, 2024 · 6eef180 · 6eef180
1 parent a56e60c
commit 6eef180
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/cookie.go b/cookie.go
@@ -17,6 +17,7 @@ func newCookieFromOptions(name, value string, options *Options) *http.Cookie {
 		Secure:      options.Secure,
 		HttpOnly:    options.HttpOnly,
 		Partitioned: options.Partitioned,
+		SameSite:    options.SameSite,
 	}
 
 }
diff --git a/options.go b/options.go
@@ -4,6 +4,8 @@
 
 package sessions
 
+import "net/http"
+
 // Options stores configuration for a session or session store.
 //
 // Fields are a subset of http.Cookie fields.
@@ -14,8 +16,9 @@ type Options struct {
 	// deleted after the browser session ends.
 	// MaxAge<0 means delete cookie immediately.
 	// MaxAge>0 means Max-Age attribute present and given in seconds.
-	MaxAge   int
-	Secure   bool
-	HttpOnly bool
+	MaxAge      int
+	Secure      bool
+	HttpOnly    bool
 	Partitioned bool
+	SameSite    http.SameSite
 }