search

aarona / devise_jwt_auth

A JWT-based port of Devise Token Auth
Do What The F*ck You Want To Public License
7 stars 2 forks source link

Add SameSite=strict to refresh token cookie #11

Open aarona opened 2 years ago

aarona commented 2 years ago

Just as the title of this issue states, it would be nice to have SameSite=strict added to the refresh token (access token as well?) for an extra layer of protection against cross origin cookie sharing.