diff --git a/server/dist/app.js b/server/dist/app.js
index 98adf48..e7e8eea 100644
--- a/server/dist/app.js
+++ b/server/dist/app.js
@@ -26,8 +26,9 @@ app.use((0, express_session_1.default)({
     saveUninitialized: true,
     cookie: {
         httpOnly: false,
-        secure: false, // true: 只有 https 才能使用 cookie
-        sameSite: true,
+        maxAge: 8 * 60 * 60 * 1000, // 8 hours
+        secure: true, // true: 只有 https 才能使用 cookie
+        sameSite: false,
     },
 }));
 app.use(express_1.default.static('public'));
diff --git a/server/dist/app.js.map b/server/dist/app.js.map
index 6f54785..c14f968 100644
--- a/server/dist/app.js.map
+++ b/server/dist/app.js.map
@@ -1 +1 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":";;;;;AAAA,gDAAuB;AACvB,oDAA2B;AAC3B,sDAA6B;AAC7B,sEAAqC;AACrC,wDAA+B;AAC/B,oDAAgD;AAChD,oDAAgD;AAChD,0DAAsD;AACtD,oDAAgD;AAChD,sDAAkD;AAElD,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAA;AACrB,gBAAM,CAAC,MAAM,EAAE,CAAA;AAEf,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,EAAE,CAAC,CAAA;AACvB,GAAG,CAAC,GAAG,CAAC,IAAA,cAAI,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAA;AAEtE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;AAEzB,GAAG,CAAC,GAAG,CACN,IAAA,yBAAO,EAAC;IACP,IAAI,EAAE,KAAK;IACX,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,MAAM,EAAE,IAAI;IACZ,KAAK,EAAE,IAAI;IACX,iBAAiB,EAAE,IAAI;IACvB,MAAM,EAAE;QACP,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,KAAK,EAAE,6BAA6B;QAC5C,QAAQ,EAAE,IAAI;KACd;CACD,CAAC,CACF,CAAA;AAED,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;AAEjC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,uBAAU,CAAC,CAAA;AAChC,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,6BAAa,CAAC,CAAA;AACvC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,uBAAU,CAAC,CAAA;AACjC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,uBAAU,CAAC,CAAA;AAChC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,yBAAW,CAAC,CAAA;AAEnC,kBAAQ;KACN,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;KACpC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;KAC/C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;AAEpC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,GAAG,EAAE;IACzC,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;AAC5D,CAAC,CAAC,CAAA"}
\ No newline at end of file
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":";;;;;AAAA,gDAAuB;AACvB,oDAA2B;AAC3B,sDAA6B;AAC7B,sEAAqC;AACrC,wDAA+B;AAC/B,oDAAgD;AAChD,oDAAgD;AAChD,0DAAsD;AACtD,oDAAgD;AAChD,sDAAkD;AAElD,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAA;AACrB,gBAAM,CAAC,MAAM,EAAE,CAAA;AAEf,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,EAAE,CAAC,CAAA;AACvB,GAAG,CAAC,GAAG,CAAC,IAAA,cAAI,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAA;AAEtE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;AAEzB,GAAG,CAAC,GAAG,CACN,IAAA,yBAAO,EAAC;IACP,IAAI,EAAE,KAAK;IACX,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,MAAM,EAAE,IAAI;IACZ,KAAK,EAAE,IAAI;IACX,iBAAiB,EAAE,IAAI;IACvB,MAAM,EAAE;QACP,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,UAAU;QACtC,MAAM,EAAE,IAAI,EAAE,6BAA6B;QAC3C,QAAQ,EAAE,KAAK;KACf;CACD,CAAC,CACF,CAAA;AAED,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;AAEjC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,uBAAU,CAAC,CAAA;AAChC,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,6BAAa,CAAC,CAAA;AACvC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,uBAAU,CAAC,CAAA;AACjC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,uBAAU,CAAC,CAAA;AAChC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,yBAAW,CAAC,CAAA;AAEnC,kBAAQ;KACN,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;KACpC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;KAC/C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;AAEpC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,GAAG,EAAE;IACzC,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;AAC5D,CAAC,CAAC,CAAA"}
\ No newline at end of file
diff --git a/server/src/app.ts b/server/src/app.ts
index 6b91579..bd4a846 100644
--- a/server/src/app.ts
+++ b/server/src/app.ts
@@ -26,8 +26,9 @@ app.use(
 		saveUninitialized: true,
 		cookie: {
 			httpOnly: false,
-			secure: false, // true: 只有 https 才能使用 cookie
-			sameSite: true,
+			maxAge: 8 * 60 * 60 * 1000, // 8 hours
+			secure: true, // true: 只有 https 才能使用 cookie
+			sameSite: false,
 		},
 	})
 )