diff --git a/handlers/auth.go b/handlers/auth.go index 7836fec..816a31f 100644 --- a/handlers/auth.go +++ b/handlers/auth.go @@ -142,12 +142,12 @@ func makeCookie(username string, remote string) (*http.Cookie, error) { cookieValue := base64.URLEncoding.EncodeToString([]byte( string(signature) + sessionToken)) cookie := &http.Cookie{ - Name: cookieName, - Value: cookieValue, - Secure: true, + Name: cookieName, + Value: cookieValue, + // Secure: true, HttpOnly: true, SameSite: http.SameSiteNoneMode, - Domain: cfg.ServerConfig.Host, + // Domain: cfg.ServerConfig.Host, } log.Info("check remote addr for cookie set", "remote", remote, "session", session)