make Cookie support SameSite=None

bungle / lua-resty-session

Session library for OpenResty – flexible and secure

BSD 2-Clause "Simplified" License

320 stars 111 forks source link

make Cookie support SameSite=None #83

Closed bodewig closed 4 years ago

bodewig commented 4 years ago

SameSite=off creates cookies without any SameSite attribute at all, which recent versions of Chrome and Firefox treat (or will treat soon) the same as SameSite=Lax. For some use-cases you really want to send Cookies on cross domain request and now have to set SameSite to None.

This trivial PR adds None to the supported values for SameSite.