This was causing issues with cross-site logout requests (e.g. when trying to logout from squeak-react). If you don't explicitly set the sameSite option to none, the browser defaults it to lax, and the browser will refuse to set those cookies on cross-site requests. So this essentially just sets the same cookie options that we do when we generate the login cookie so we don't hit these errors.
This was causing issues with cross-site logout requests (e.g. when trying to logout from squeak-react). If you don't explicitly set the
sameSite
option tonone
, the browser defaults it tolax
, and the browser will refuse to set those cookies on cross-site requests. So this essentially just sets the same cookie options that we do when we generate the login cookie so we don't hit these errors.