IndominusByte / fastapi-jwt-auth

FastAPI extension that provides JWT Auth support (secure, easy to use, and lightweight)
http://indominusbyte.github.io/fastapi-jwt-auth/
MIT License
627 stars 143 forks source link

Same-Site Cookie Context #79

Open lakshaythareja opened 2 years ago

lakshaythareja commented 2 years ago

The values allowed are 'strict', 'lax' or 'none'. With case-sensitive checks. Chrome accepts values with capitalized words, example: Strict, Lax, None.

We either need to check it by converting values to lower as we do while setting the cookie. Example: setting it in config to "None" fails: image

Whereas while setting it starlette checks for lower case value: image