fix: rollback samesite option to Lax, because of broken OAuth

2026-02-24 21:59:48 +00:00 · 2026-02-20 20:54:37 +02:00
parent c4fefa6071
commit f6defbf90d
1 changed files with 1 additions and 1 deletions
--- a/src/ahriman/web/middlewares/auth_handler.py
+++ b/src/ahriman/web/middlewares/auth_handler.py
@@ -154,7 +154,7 @@ def setup_auth(application: Application, configuration: Configuration, validator
        cookie_name="AHRIMAN",
        max_age=validator.max_age,
        httponly=True,
-        samesite="Strict",
+        samesite="Lax",
    )
    setup_session(application, storage)