fix: rollback samesite option to Lax, because of broken OAuth

This commit is contained in:
2026-02-20 20:54:37 +02:00
parent c4fefa6071
commit f6defbf90d

View File

@@ -154,7 +154,7 @@ def setup_auth(application: Application, configuration: Configuration, validator
cookie_name="AHRIMAN", cookie_name="AHRIMAN",
max_age=validator.max_age, max_age=validator.max_age,
httponly=True, httponly=True,
samesite="Strict", samesite="Lax",
) )
setup_session(application, storage) setup_session(application, storage)